Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1 | /* |
| 2 | * SSL client with certificate authentication |
| 3 | * |
Manuel Pégourié-Gonnard | 6fb8187 | 2015-07-27 11:11:48 +0200 | [diff] [blame] | 4 | * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved |
Manuel Pégourié-Gonnard | 37ff140 | 2015-09-04 14:21:07 +0200 | [diff] [blame] | 5 | * SPDX-License-Identifier: Apache-2.0 |
| 6 | * |
| 7 | * Licensed under the Apache License, Version 2.0 (the "License"); you may |
| 8 | * not use this file except in compliance with the License. |
| 9 | * You may obtain a copy of the License at |
| 10 | * |
| 11 | * http://www.apache.org/licenses/LICENSE-2.0 |
| 12 | * |
| 13 | * Unless required by applicable law or agreed to in writing, software |
| 14 | * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
| 15 | * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 16 | * See the License for the specific language governing permissions and |
| 17 | * limitations under the License. |
Paul Bakker | b96f154 | 2010-07-18 20:36:00 +0000 | [diff] [blame] | 18 | * |
Manuel Pégourié-Gonnard | fe44643 | 2015-03-06 13:17:10 +0000 | [diff] [blame] | 19 | * This file is part of mbed TLS (https://tls.mbed.org) |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 20 | */ |
| 21 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 22 | #if !defined(MBEDTLS_CONFIG_FILE) |
Manuel Pégourié-Gonnard | 7f80997 | 2015-03-09 17:05:11 +0000 | [diff] [blame] | 23 | #include "mbedtls/config.h" |
Manuel Pégourié-Gonnard | cef4ad2 | 2014-04-29 12:39:06 +0200 | [diff] [blame] | 24 | #else |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 25 | #include MBEDTLS_CONFIG_FILE |
Manuel Pégourié-Gonnard | cef4ad2 | 2014-04-29 12:39:06 +0200 | [diff] [blame] | 26 | #endif |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 27 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 28 | #if defined(MBEDTLS_PLATFORM_C) |
Manuel Pégourié-Gonnard | 7f80997 | 2015-03-09 17:05:11 +0000 | [diff] [blame] | 29 | #include "mbedtls/platform.h" |
Rich Evans | f90016a | 2015-01-19 14:26:37 +0000 | [diff] [blame] | 30 | #else |
Rich Evans | 18b78c7 | 2015-02-11 14:06:19 +0000 | [diff] [blame] | 31 | #include <stdio.h> |
Simon Butcher | d3138c3 | 2016-04-27 01:26:50 +0100 | [diff] [blame] | 32 | #include <stdlib.h> |
| 33 | #define mbedtls_time time |
| 34 | #define mbedtls_time_t time_t |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 35 | #define mbedtls_printf printf |
| 36 | #define mbedtls_fprintf fprintf |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 37 | #define mbedtls_snprintf snprintf |
Rich Evans | f90016a | 2015-01-19 14:26:37 +0000 | [diff] [blame] | 38 | #endif |
| 39 | |
Manuel Pégourié-Gonnard | e3c41ad | 2015-05-13 10:04:32 +0200 | [diff] [blame] | 40 | #if !defined(MBEDTLS_ENTROPY_C) || \ |
| 41 | !defined(MBEDTLS_SSL_TLS_C) || !defined(MBEDTLS_SSL_CLI_C) || \ |
Manuel Pégourié-Gonnard | d2377e7 | 2015-05-13 13:58:56 +0200 | [diff] [blame] | 42 | !defined(MBEDTLS_NET_C) || !defined(MBEDTLS_CTR_DRBG_C) |
Manuel Pégourié-Gonnard | e3c41ad | 2015-05-13 10:04:32 +0200 | [diff] [blame] | 43 | int main( void ) |
| 44 | { |
| 45 | mbedtls_printf("MBEDTLS_ENTROPY_C and/or " |
| 46 | "MBEDTLS_SSL_TLS_C and/or MBEDTLS_SSL_CLI_C and/or " |
Manuel Pégourié-Gonnard | d2377e7 | 2015-05-13 13:58:56 +0200 | [diff] [blame] | 47 | "MBEDTLS_NET_C and/or MBEDTLS_CTR_DRBG_C and/or not defined.\n"); |
Manuel Pégourié-Gonnard | e3c41ad | 2015-05-13 10:04:32 +0200 | [diff] [blame] | 48 | return( 0 ); |
| 49 | } |
| 50 | #else |
| 51 | |
Andres AG | 788aa4a | 2016-09-14 14:32:09 +0100 | [diff] [blame] | 52 | #include "mbedtls/net_sockets.h" |
Manuel Pégourié-Gonnard | 7f80997 | 2015-03-09 17:05:11 +0000 | [diff] [blame] | 53 | #include "mbedtls/ssl.h" |
| 54 | #include "mbedtls/entropy.h" |
| 55 | #include "mbedtls/ctr_drbg.h" |
| 56 | #include "mbedtls/certs.h" |
| 57 | #include "mbedtls/x509.h" |
| 58 | #include "mbedtls/error.h" |
| 59 | #include "mbedtls/debug.h" |
Manuel Pégourié-Gonnard | e3c41ad | 2015-05-13 10:04:32 +0200 | [diff] [blame] | 60 | #include "mbedtls/timing.h" |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 61 | |
Rich Evans | 18b78c7 | 2015-02-11 14:06:19 +0000 | [diff] [blame] | 62 | #include <stdio.h> |
| 63 | #include <stdlib.h> |
| 64 | #include <string.h> |
Manuel Pégourié-Gonnard | c55a5b7 | 2014-02-20 22:50:56 +0100 | [diff] [blame] | 65 | |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 66 | #define DFL_SERVER_NAME "localhost" |
Manuel Pégourié-Gonnard | 0d8780b | 2014-02-25 11:11:26 +0100 | [diff] [blame] | 67 | #define DFL_SERVER_ADDR NULL |
Manuel Pégourié-Gonnard | c0d7494 | 2015-06-23 12:30:57 +0200 | [diff] [blame] | 68 | #define DFL_SERVER_PORT "4433" |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 69 | #define DFL_REQUEST_PAGE "/" |
Manuel Pégourié-Gonnard | dea29c5 | 2014-06-18 13:07:56 +0200 | [diff] [blame] | 70 | #define DFL_REQUEST_SIZE -1 |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 71 | #define DFL_DEBUG_LEVEL 0 |
Manuel Pégourié-Gonnard | 5575316 | 2014-02-26 13:47:08 +0100 | [diff] [blame] | 72 | #define DFL_NBIO 0 |
Manuel Pégourié-Gonnard | 6b65141 | 2014-10-01 18:29:03 +0200 | [diff] [blame] | 73 | #define DFL_READ_TIMEOUT 0 |
Manuel Pégourié-Gonnard | f1e0df3 | 2014-10-02 14:02:32 +0200 | [diff] [blame] | 74 | #define DFL_MAX_RESEND 0 |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 75 | #define DFL_CA_FILE "" |
Paul Bakker | 8d91458 | 2012-06-04 12:46:42 +0000 | [diff] [blame] | 76 | #define DFL_CA_PATH "" |
Paul Bakker | 6796839 | 2010-07-18 08:28:20 +0000 | [diff] [blame] | 77 | #define DFL_CRT_FILE "" |
| 78 | #define DFL_KEY_FILE "" |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 79 | #define DFL_PSK "" |
| 80 | #define DFL_PSK_IDENTITY "Client_identity" |
Manuel Pégourié-Gonnard | 70905a7 | 2015-09-16 11:08:34 +0200 | [diff] [blame] | 81 | #define DFL_ECJPAKE_PW NULL |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 82 | #define DFL_FORCE_CIPHER 0 |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 83 | #define DFL_RENEGOTIATION MBEDTLS_SSL_RENEGOTIATION_DISABLED |
Manuel Pégourié-Gonnard | 85d915b | 2014-11-03 20:10:36 +0100 | [diff] [blame] | 84 | #define DFL_ALLOW_LEGACY -2 |
Manuel Pégourié-Gonnard | 780d671 | 2014-02-20 17:19:59 +0100 | [diff] [blame] | 85 | #define DFL_RENEGOTIATE 0 |
Manuel Pégourié-Gonnard | a8c0a0d | 2014-08-15 12:07:38 +0200 | [diff] [blame] | 86 | #define DFL_EXCHANGES 1 |
Manuel Pégourié-Gonnard | 8c8be1e | 2015-03-31 14:21:11 +0200 | [diff] [blame] | 87 | #define DFL_MIN_VERSION -1 |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 88 | #define DFL_MAX_VERSION -1 |
Manuel Pégourié-Gonnard | d42b7c8 | 2015-03-20 19:44:04 +0000 | [diff] [blame] | 89 | #define DFL_ARC4 -1 |
Manuel Pégourié-Gonnard | fa44f20 | 2015-03-27 17:52:25 +0100 | [diff] [blame] | 90 | #define DFL_AUTH_MODE -1 |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 91 | #define DFL_MFL_CODE MBEDTLS_SSL_MAX_FRAG_LEN_NONE |
Manuel Pégourié-Gonnard | 265fe99 | 2015-01-09 12:43:35 +0100 | [diff] [blame] | 92 | #define DFL_TRUNC_HMAC -1 |
Manuel Pégourié-Gonnard | c82ee35 | 2015-01-07 16:35:25 +0100 | [diff] [blame] | 93 | #define DFL_RECSPLIT -1 |
Manuel Pégourié-Gonnard | 9096682 | 2015-06-11 17:02:29 +0200 | [diff] [blame] | 94 | #define DFL_DHMLEN -1 |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 95 | #define DFL_RECONNECT 0 |
Manuel Pégourié-Gonnard | c55a5b7 | 2014-02-20 22:50:56 +0100 | [diff] [blame] | 96 | #define DFL_RECO_DELAY 0 |
Manuel Pégourié-Gonnard | dbd2307 | 2015-09-04 10:20:17 +0200 | [diff] [blame] | 97 | #define DFL_RECONNECT_HARD 0 |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 98 | #define DFL_TICKETS MBEDTLS_SSL_SESSION_TICKETS_ENABLED |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 99 | #define DFL_ALPN_STRING NULL |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 100 | #define DFL_TRANSPORT MBEDTLS_SSL_TRANSPORT_STREAM |
Manuel Pégourié-Gonnard | d823bd0 | 2014-10-01 14:40:56 +0200 | [diff] [blame] | 101 | #define DFL_HS_TO_MIN 0 |
| 102 | #define DFL_HS_TO_MAX 0 |
Manuel Pégourié-Gonnard | 1cbd39d | 2014-10-20 13:34:59 +0200 | [diff] [blame] | 103 | #define DFL_FALLBACK -1 |
Manuel Pégourié-Gonnard | 367381f | 2014-10-20 18:40:56 +0200 | [diff] [blame] | 104 | #define DFL_EXTENDED_MS -1 |
Manuel Pégourié-Gonnard | 699cafa | 2014-10-27 13:57:03 +0100 | [diff] [blame] | 105 | #define DFL_ETM -1 |
Paul Bakker | 0e6975b | 2009-02-10 22:19:10 +0000 | [diff] [blame] | 106 | |
Paul Bakker | 93c32b2 | 2014-04-25 13:40:05 +0200 | [diff] [blame] | 107 | #define GET_REQUEST "GET %s HTTP/1.0\r\nExtra-header: " |
| 108 | #define GET_REQUEST_END "\r\n\r\n" |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 109 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 110 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
| 111 | #if defined(MBEDTLS_FS_IO) |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 112 | #define USAGE_IO \ |
Paul Bakker | 1f9d02d | 2012-11-20 10:30:55 +0100 | [diff] [blame] | 113 | " ca_file=%%s The single file containing the top-level CA(s) you fully trust\n" \ |
| 114 | " default: \"\" (pre-loaded)\n" \ |
| 115 | " ca_path=%%s The path containing the top-level CA(s) you fully trust\n" \ |
| 116 | " default: \"\" (pre-loaded) (overrides ca_file)\n" \ |
| 117 | " crt_file=%%s Your own cert and chain (in bottom to top order, top may be omitted)\n" \ |
| 118 | " default: \"\" (pre-loaded)\n" \ |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 119 | " key_file=%%s default: \"\" (pre-loaded)\n" |
| 120 | #else |
| 121 | #define USAGE_IO \ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 122 | " No file operations available (MBEDTLS_FS_IO not defined)\n" |
| 123 | #endif /* MBEDTLS_FS_IO */ |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 124 | #else |
| 125 | #define USAGE_IO "" |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 126 | #endif /* MBEDTLS_X509_CRT_PARSE_C */ |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 127 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 128 | #if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED) |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 129 | #define USAGE_PSK \ |
| 130 | " psk=%%s default: \"\" (in hex, without 0x)\n" \ |
| 131 | " psk_identity=%%s default: \"Client_identity\"\n" |
| 132 | #else |
| 133 | #define USAGE_PSK "" |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 134 | #endif /* MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED */ |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 135 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 136 | #if defined(MBEDTLS_SSL_SESSION_TICKETS) |
Paul Bakker | a503a63 | 2013-08-14 13:48:06 +0200 | [diff] [blame] | 137 | #define USAGE_TICKETS \ |
| 138 | " tickets=%%d default: 1 (enabled)\n" |
| 139 | #else |
| 140 | #define USAGE_TICKETS "" |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 141 | #endif /* MBEDTLS_SSL_SESSION_TICKETS */ |
Paul Bakker | a503a63 | 2013-08-14 13:48:06 +0200 | [diff] [blame] | 142 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 143 | #if defined(MBEDTLS_SSL_TRUNCATED_HMAC) |
Paul Bakker | 1f2bc62 | 2013-08-15 13:45:55 +0200 | [diff] [blame] | 144 | #define USAGE_TRUNC_HMAC \ |
Manuel Pégourié-Gonnard | 265fe99 | 2015-01-09 12:43:35 +0100 | [diff] [blame] | 145 | " trunc_hmac=%%d default: library default\n" |
Paul Bakker | 1f2bc62 | 2013-08-15 13:45:55 +0200 | [diff] [blame] | 146 | #else |
| 147 | #define USAGE_TRUNC_HMAC "" |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 148 | #endif /* MBEDTLS_SSL_TRUNCATED_HMAC */ |
Paul Bakker | 1f2bc62 | 2013-08-15 13:45:55 +0200 | [diff] [blame] | 149 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 150 | #if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH) |
Paul Bakker | 05decb2 | 2013-08-15 13:33:48 +0200 | [diff] [blame] | 151 | #define USAGE_MAX_FRAG_LEN \ |
| 152 | " max_frag_len=%%d default: 16384 (tls default)\n" \ |
| 153 | " options: 512, 1024, 2048, 4096\n" |
| 154 | #else |
| 155 | #define USAGE_MAX_FRAG_LEN "" |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 156 | #endif /* MBEDTLS_SSL_MAX_FRAGMENT_LENGTH */ |
Paul Bakker | 05decb2 | 2013-08-15 13:33:48 +0200 | [diff] [blame] | 157 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 158 | #if defined(MBEDTLS_SSL_CBC_RECORD_SPLITTING) |
Manuel Pégourié-Gonnard | c82ee35 | 2015-01-07 16:35:25 +0100 | [diff] [blame] | 159 | #define USAGE_RECSPLIT \ |
Manuel Pégourié-Gonnard | bf27eaa | 2015-06-11 17:02:10 +0200 | [diff] [blame] | 160 | " recsplit=0/1 default: (library default: on)\n" |
Manuel Pégourié-Gonnard | c82ee35 | 2015-01-07 16:35:25 +0100 | [diff] [blame] | 161 | #else |
| 162 | #define USAGE_RECSPLIT |
| 163 | #endif |
| 164 | |
Manuel Pégourié-Gonnard | 9096682 | 2015-06-11 17:02:29 +0200 | [diff] [blame] | 165 | #if defined(MBEDTLS_DHM_C) |
| 166 | #define USAGE_DHMLEN \ |
| 167 | " dhmlen=%%d default: (library default: 1024 bits)\n" |
| 168 | #else |
| 169 | #define USAGE_DHMLEN |
| 170 | #endif |
| 171 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 172 | #if defined(MBEDTLS_SSL_ALPN) |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 173 | #define USAGE_ALPN \ |
| 174 | " alpn=%%s default: \"\" (disabled)\n" \ |
| 175 | " example: spdy/1,http/1.1\n" |
| 176 | #else |
| 177 | #define USAGE_ALPN "" |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 178 | #endif /* MBEDTLS_SSL_ALPN */ |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 179 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 180 | #if defined(MBEDTLS_SSL_PROTO_DTLS) |
Manuel Pégourié-Gonnard | d823bd0 | 2014-10-01 14:40:56 +0200 | [diff] [blame] | 181 | #define USAGE_DTLS \ |
| 182 | " dtls=%%d default: 0 (TLS)\n" \ |
| 183 | " hs_timeout=%%d-%%d default: (library default: 1000-60000)\n" \ |
| 184 | " range of DTLS handshake timeouts in millisecs\n" |
| 185 | #else |
| 186 | #define USAGE_DTLS "" |
| 187 | #endif |
| 188 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 189 | #if defined(MBEDTLS_SSL_FALLBACK_SCSV) |
Manuel Pégourié-Gonnard | 1cbd39d | 2014-10-20 13:34:59 +0200 | [diff] [blame] | 190 | #define USAGE_FALLBACK \ |
| 191 | " fallback=0/1 default: (library default: off)\n" |
| 192 | #else |
| 193 | #define USAGE_FALLBACK "" |
| 194 | #endif |
| 195 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 196 | #if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET) |
Manuel Pégourié-Gonnard | 367381f | 2014-10-20 18:40:56 +0200 | [diff] [blame] | 197 | #define USAGE_EMS \ |
| 198 | " extended_ms=0/1 default: (library default: on)\n" |
| 199 | #else |
| 200 | #define USAGE_EMS "" |
| 201 | #endif |
| 202 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 203 | #if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC) |
Manuel Pégourié-Gonnard | 699cafa | 2014-10-27 13:57:03 +0100 | [diff] [blame] | 204 | #define USAGE_ETM \ |
| 205 | " etm=0/1 default: (library default: on)\n" |
| 206 | #else |
| 207 | #define USAGE_ETM "" |
| 208 | #endif |
| 209 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 210 | #if defined(MBEDTLS_SSL_RENEGOTIATION) |
Manuel Pégourié-Gonnard | 615e677 | 2014-11-03 08:23:14 +0100 | [diff] [blame] | 211 | #define USAGE_RENEGO \ |
| 212 | " renegotiation=%%d default: 0 (disabled)\n" \ |
| 213 | " renegotiate=%%d default: 0 (disabled)\n" |
| 214 | #else |
| 215 | #define USAGE_RENEGO "" |
| 216 | #endif |
| 217 | |
Manuel Pégourié-Gonnard | 70905a7 | 2015-09-16 11:08:34 +0200 | [diff] [blame] | 218 | #if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED) |
| 219 | #define USAGE_ECJPAKE \ |
| 220 | " ecjpake_pw=%%s default: none (disabled)\n" |
| 221 | #else |
| 222 | #define USAGE_ECJPAKE "" |
| 223 | #endif |
| 224 | |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 225 | #define USAGE \ |
Paul Bakker | 6796839 | 2010-07-18 08:28:20 +0000 | [diff] [blame] | 226 | "\n usage: ssl_client2 param=<>...\n" \ |
| 227 | "\n acceptable parameters:\n" \ |
| 228 | " server_name=%%s default: localhost\n" \ |
Manuel Pégourié-Gonnard | 0d8780b | 2014-02-25 11:11:26 +0100 | [diff] [blame] | 229 | " server_addr=%%s default: given by name\n" \ |
Paul Bakker | 6796839 | 2010-07-18 08:28:20 +0000 | [diff] [blame] | 230 | " server_port=%%d default: 4433\n" \ |
Paul Bakker | 6796839 | 2010-07-18 08:28:20 +0000 | [diff] [blame] | 231 | " request_page=%%s default: \".\"\n" \ |
Manuel Pégourié-Gonnard | dea29c5 | 2014-06-18 13:07:56 +0200 | [diff] [blame] | 232 | " request_size=%%d default: about 34 (basic request)\n" \ |
| 233 | " (minimum: 0, max: 16384)\n" \ |
Manuel Pégourié-Gonnard | 2fc243d | 2014-02-19 18:22:59 +0100 | [diff] [blame] | 234 | " debug_level=%%d default: 0 (disabled)\n" \ |
Manuel Pégourié-Gonnard | 5575316 | 2014-02-26 13:47:08 +0100 | [diff] [blame] | 235 | " nbio=%%d default: 0 (blocking I/O)\n" \ |
| 236 | " options: 1 (non-blocking), 2 (added delays)\n" \ |
Manuel Pégourié-Gonnard | 22311ae | 2015-09-09 11:22:58 +0200 | [diff] [blame] | 237 | " read_timeout=%%d default: 0 ms (no timeout)\n" \ |
Manuel Pégourié-Gonnard | f1e0df3 | 2014-10-02 14:02:32 +0200 | [diff] [blame] | 238 | " max_resend=%%d default: 0 (no resend on timeout)\n" \ |
Manuel Pégourié-Gonnard | 2fc243d | 2014-02-19 18:22:59 +0100 | [diff] [blame] | 239 | "\n" \ |
Manuel Pégourié-Gonnard | d823bd0 | 2014-10-01 14:40:56 +0200 | [diff] [blame] | 240 | USAGE_DTLS \ |
| 241 | "\n" \ |
Manuel Pégourié-Gonnard | fa44f20 | 2015-03-27 17:52:25 +0100 | [diff] [blame] | 242 | " auth_mode=%%s default: (library default: none)\n" \ |
Manuel Pégourié-Gonnard | 2fc243d | 2014-02-19 18:22:59 +0100 | [diff] [blame] | 243 | " options: none, optional, required\n" \ |
| 244 | USAGE_IO \ |
| 245 | "\n" \ |
| 246 | USAGE_PSK \ |
Manuel Pégourié-Gonnard | 70905a7 | 2015-09-16 11:08:34 +0200 | [diff] [blame] | 247 | USAGE_ECJPAKE \ |
Manuel Pégourié-Gonnard | 2fc243d | 2014-02-19 18:22:59 +0100 | [diff] [blame] | 248 | "\n" \ |
Manuel Pégourié-Gonnard | 85d915b | 2014-11-03 20:10:36 +0100 | [diff] [blame] | 249 | " allow_legacy=%%d default: (library default: no)\n" \ |
Manuel Pégourié-Gonnard | 615e677 | 2014-11-03 08:23:14 +0100 | [diff] [blame] | 250 | USAGE_RENEGO \ |
Manuel Pégourié-Gonnard | a8c0a0d | 2014-08-15 12:07:38 +0200 | [diff] [blame] | 251 | " exchanges=%%d default: 1\n" \ |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 252 | " reconnect=%%d default: 0 (disabled)\n" \ |
Manuel Pégourié-Gonnard | e3c41ad | 2015-05-13 10:04:32 +0200 | [diff] [blame] | 253 | " reco_delay=%%d default: 0 seconds\n" \ |
Manuel Pégourié-Gonnard | dbd2307 | 2015-09-04 10:20:17 +0200 | [diff] [blame] | 254 | " reconnect_hard=%%d default: 0 (disabled)\n" \ |
Paul Bakker | a503a63 | 2013-08-14 13:48:06 +0200 | [diff] [blame] | 255 | USAGE_TICKETS \ |
Manuel Pégourié-Gonnard | 2fc243d | 2014-02-19 18:22:59 +0100 | [diff] [blame] | 256 | USAGE_MAX_FRAG_LEN \ |
| 257 | USAGE_TRUNC_HMAC \ |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 258 | USAGE_ALPN \ |
Manuel Pégourié-Gonnard | 1cbd39d | 2014-10-20 13:34:59 +0200 | [diff] [blame] | 259 | USAGE_FALLBACK \ |
Manuel Pégourié-Gonnard | 367381f | 2014-10-20 18:40:56 +0200 | [diff] [blame] | 260 | USAGE_EMS \ |
Manuel Pégourié-Gonnard | 699cafa | 2014-10-27 13:57:03 +0100 | [diff] [blame] | 261 | USAGE_ETM \ |
Manuel Pégourié-Gonnard | c82ee35 | 2015-01-07 16:35:25 +0100 | [diff] [blame] | 262 | USAGE_RECSPLIT \ |
Manuel Pégourié-Gonnard | 9096682 | 2015-06-11 17:02:29 +0200 | [diff] [blame] | 263 | USAGE_DHMLEN \ |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 264 | "\n" \ |
Manuel Pégourié-Gonnard | fa44f20 | 2015-03-27 17:52:25 +0100 | [diff] [blame] | 265 | " arc4=%%d default: (library default: 0)\n" \ |
Manuel Pégourié-Gonnard | 8c8be1e | 2015-03-31 14:21:11 +0200 | [diff] [blame] | 266 | " min_version=%%s default: (library default: tls1)\n" \ |
| 267 | " max_version=%%s default: (library default: tls1_2)\n" \ |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 268 | " force_version=%%s default: \"\" (none)\n" \ |
Manuel Pégourié-Gonnard | 83218f1 | 2014-02-12 11:11:12 +0100 | [diff] [blame] | 269 | " options: ssl3, tls1, tls1_1, tls1_2, dtls1, dtls1_2\n" \ |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 270 | "\n" \ |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 271 | " force_ciphersuite=<name> default: all enabled\n"\ |
| 272 | " acceptable ciphersuite names:\n" |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 273 | |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 274 | /* |
| 275 | * global options |
| 276 | */ |
| 277 | struct options |
| 278 | { |
| 279 | const char *server_name; /* hostname of the server (client only) */ |
| 280 | const char *server_addr; /* address of the server (client only) */ |
Manuel Pégourié-Gonnard | c0d7494 | 2015-06-23 12:30:57 +0200 | [diff] [blame] | 281 | const char *server_port; /* port on which the ssl service runs */ |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 282 | int debug_level; /* level of debugging */ |
| 283 | int nbio; /* should I/O be blocking? */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 284 | uint32_t read_timeout; /* timeout on mbedtls_ssl_read() in milliseconds */ |
Manuel Pégourié-Gonnard | d901d17 | 2015-02-16 18:37:53 +0000 | [diff] [blame] | 285 | int max_resend; /* DTLS times to resend on read timeout */ |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 286 | const char *request_page; /* page on server to request */ |
| 287 | int request_size; /* pad request with header to requested size */ |
| 288 | const char *ca_file; /* the file with the CA certificate(s) */ |
| 289 | const char *ca_path; /* the path with the CA certificate(s) reside */ |
| 290 | const char *crt_file; /* the file with the client certificate */ |
| 291 | const char *key_file; /* the file with the client key */ |
| 292 | const char *psk; /* the pre-shared key */ |
| 293 | const char *psk_identity; /* the pre-shared key identity */ |
Manuel Pégourié-Gonnard | 70905a7 | 2015-09-16 11:08:34 +0200 | [diff] [blame] | 294 | const char *ecjpake_pw; /* the EC J-PAKE password */ |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 295 | int force_ciphersuite[2]; /* protocol/ciphersuite to use, or all */ |
| 296 | int renegotiation; /* enable / disable renegotiation */ |
| 297 | int allow_legacy; /* allow legacy renegotiation */ |
| 298 | int renegotiate; /* attempt renegotiation? */ |
| 299 | int renego_delay; /* delay before enforcing renegotiation */ |
| 300 | int exchanges; /* number of data exchanges */ |
| 301 | int min_version; /* minimum protocol version accepted */ |
| 302 | int max_version; /* maximum protocol version accepted */ |
| 303 | int arc4; /* flag for arc4 suites support */ |
| 304 | int auth_mode; /* verify mode for connection */ |
| 305 | unsigned char mfl_code; /* code for maximum fragment length */ |
| 306 | int trunc_hmac; /* negotiate truncated hmac or not */ |
| 307 | int recsplit; /* enable record splitting? */ |
Manuel Pégourié-Gonnard | 9096682 | 2015-06-11 17:02:29 +0200 | [diff] [blame] | 308 | int dhmlen; /* minimum DHM params len in bits */ |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 309 | int reconnect; /* attempt to resume session */ |
| 310 | int reco_delay; /* delay in seconds before resuming session */ |
Manuel Pégourié-Gonnard | dbd2307 | 2015-09-04 10:20:17 +0200 | [diff] [blame] | 311 | int reconnect_hard; /* unexpectedly reconnect from the same port */ |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 312 | int tickets; /* enable / disable session tickets */ |
| 313 | const char *alpn_string; /* ALPN supported protocols */ |
Manuel Pégourié-Gonnard | d901d17 | 2015-02-16 18:37:53 +0000 | [diff] [blame] | 314 | int transport; /* TLS or DTLS? */ |
| 315 | uint32_t hs_to_min; /* Initial value of DTLS handshake timer */ |
| 316 | uint32_t hs_to_max; /* Max value of DTLS handshake timer */ |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 317 | int fallback; /* is this a fallback connection? */ |
| 318 | int extended_ms; /* negotiate extended master secret? */ |
| 319 | int etm; /* negotiate encrypt then mac? */ |
| 320 | } opt; |
| 321 | |
Manuel Pégourié-Gonnard | 61ee351 | 2015-06-23 17:35:03 +0200 | [diff] [blame] | 322 | static void my_debug( void *ctx, int level, |
| 323 | const char *file, int line, |
| 324 | const char *str ) |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 325 | { |
Manuel Pégourié-Gonnard | 052f288 | 2015-07-01 11:50:23 +0200 | [diff] [blame] | 326 | const char *p, *basename; |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 327 | |
Manuel Pégourié-Gonnard | 052f288 | 2015-07-01 11:50:23 +0200 | [diff] [blame] | 328 | /* Extract basename from file */ |
| 329 | for( p = basename = file; *p != '\0'; p++ ) |
| 330 | if( *p == '/' || *p == '\\' ) |
| 331 | basename = p + 1; |
| 332 | |
| 333 | mbedtls_fprintf( (FILE *) ctx, "%s:%04d: |%d| %s", basename, line, level, str ); |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 334 | fflush( (FILE *) ctx ); |
| 335 | } |
| 336 | |
| 337 | /* |
| 338 | * Test recv/send functions that make sure each try returns |
| 339 | * WANT_READ/WANT_WRITE at least once before sucesseding |
| 340 | */ |
| 341 | static int my_recv( void *ctx, unsigned char *buf, size_t len ) |
| 342 | { |
| 343 | static int first_try = 1; |
| 344 | int ret; |
| 345 | |
| 346 | if( first_try ) |
| 347 | { |
| 348 | first_try = 0; |
Manuel Pégourié-Gonnard | 8836994 | 2015-05-06 16:19:31 +0100 | [diff] [blame] | 349 | return( MBEDTLS_ERR_SSL_WANT_READ ); |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 350 | } |
| 351 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 352 | ret = mbedtls_net_recv( ctx, buf, len ); |
Manuel Pégourié-Gonnard | 8836994 | 2015-05-06 16:19:31 +0100 | [diff] [blame] | 353 | if( ret != MBEDTLS_ERR_SSL_WANT_READ ) |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 354 | first_try = 1; /* Next call will be a new operation */ |
| 355 | return( ret ); |
| 356 | } |
| 357 | |
| 358 | static int my_send( void *ctx, const unsigned char *buf, size_t len ) |
| 359 | { |
| 360 | static int first_try = 1; |
| 361 | int ret; |
| 362 | |
| 363 | if( first_try ) |
| 364 | { |
| 365 | first_try = 0; |
Manuel Pégourié-Gonnard | 8836994 | 2015-05-06 16:19:31 +0100 | [diff] [blame] | 366 | return( MBEDTLS_ERR_SSL_WANT_WRITE ); |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 367 | } |
| 368 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 369 | ret = mbedtls_net_send( ctx, buf, len ); |
Manuel Pégourié-Gonnard | 8836994 | 2015-05-06 16:19:31 +0100 | [diff] [blame] | 370 | if( ret != MBEDTLS_ERR_SSL_WANT_WRITE ) |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 371 | first_try = 1; /* Next call will be a new operation */ |
| 372 | return( ret ); |
| 373 | } |
| 374 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 375 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 376 | /* |
| 377 | * Enabled if debug_level > 1 in code below |
| 378 | */ |
Manuel Pégourié-Gonnard | e6ef16f | 2015-05-11 19:54:43 +0200 | [diff] [blame] | 379 | static int my_verify( void *data, mbedtls_x509_crt *crt, int depth, uint32_t *flags ) |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 380 | { |
| 381 | char buf[1024]; |
| 382 | ((void) data); |
| 383 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 384 | mbedtls_printf( "\nVerify requested for (Depth %d):\n", depth ); |
| 385 | mbedtls_x509_crt_info( buf, sizeof( buf ) - 1, "", crt ); |
| 386 | mbedtls_printf( "%s", buf ); |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 387 | |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 388 | if ( ( *flags ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 389 | mbedtls_printf( " This certificate has no flags\n" ); |
Manuel Pégourié-Gonnard | 89addc4 | 2015-04-20 10:56:18 +0100 | [diff] [blame] | 390 | else |
| 391 | { |
| 392 | mbedtls_x509_crt_verify_info( buf, sizeof( buf ), " ! ", *flags ); |
| 393 | mbedtls_printf( "%s\n", buf ); |
| 394 | } |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 395 | |
| 396 | return( 0 ); |
| 397 | } |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 398 | #endif /* MBEDTLS_X509_CRT_PARSE_C */ |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 399 | |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 400 | int main( int argc, char *argv[] ) |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 401 | { |
Manuel Pégourié-Gonnard | 5db6432 | 2015-06-30 15:40:39 +0200 | [diff] [blame] | 402 | int ret = 0, len, tail_len, i, written, frags, retry_left; |
| 403 | mbedtls_net_context server_fd; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 404 | unsigned char buf[MBEDTLS_SSL_MAX_CONTENT_LEN + 1]; |
| 405 | #if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED) |
| 406 | unsigned char psk[MBEDTLS_PSK_MAX_LEN]; |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 407 | size_t psk_len = 0; |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 408 | #endif |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 409 | #if defined(MBEDTLS_SSL_ALPN) |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 410 | const char *alpn_list[10]; |
| 411 | #endif |
Paul Bakker | ef3f8c7 | 2013-06-24 13:01:08 +0200 | [diff] [blame] | 412 | const char *pers = "ssl_client2"; |
Paul Bakker | 508ad5a | 2011-12-04 17:09:26 +0000 | [diff] [blame] | 413 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 414 | mbedtls_entropy_context entropy; |
| 415 | mbedtls_ctr_drbg_context ctr_drbg; |
| 416 | mbedtls_ssl_context ssl; |
Manuel Pégourié-Gonnard | def0bbe | 2015-05-04 14:56:36 +0200 | [diff] [blame] | 417 | mbedtls_ssl_config conf; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 418 | mbedtls_ssl_session saved_session; |
Manuel Pégourié-Gonnard | d2377e7 | 2015-05-13 13:58:56 +0200 | [diff] [blame] | 419 | #if defined(MBEDTLS_TIMING_C) |
Manuel Pégourié-Gonnard | e3c41ad | 2015-05-13 10:04:32 +0200 | [diff] [blame] | 420 | mbedtls_timing_delay_context timer; |
Manuel Pégourié-Gonnard | d2377e7 | 2015-05-13 13:58:56 +0200 | [diff] [blame] | 421 | #endif |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 422 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
Manuel Pégourié-Gonnard | db1cc76 | 2015-05-12 11:27:25 +0200 | [diff] [blame] | 423 | uint32_t flags; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 424 | mbedtls_x509_crt cacert; |
| 425 | mbedtls_x509_crt clicert; |
| 426 | mbedtls_pk_context pkey; |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 427 | #endif |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 428 | char *p, *q; |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 429 | const int *list; |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 430 | |
Paul Bakker | 1a207ec | 2011-02-06 13:22:40 +0000 | [diff] [blame] | 431 | /* |
| 432 | * Make sure memory references are valid. |
| 433 | */ |
Manuel Pégourié-Gonnard | 5db6432 | 2015-06-30 15:40:39 +0200 | [diff] [blame] | 434 | mbedtls_net_init( &server_fd ); |
Manuel Pégourié-Gonnard | 41d479e | 2015-04-29 00:48:22 +0200 | [diff] [blame] | 435 | mbedtls_ssl_init( &ssl ); |
Manuel Pégourié-Gonnard | def0bbe | 2015-05-04 14:56:36 +0200 | [diff] [blame] | 436 | mbedtls_ssl_config_init( &conf ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 437 | memset( &saved_session, 0, sizeof( mbedtls_ssl_session ) ); |
Manuel Pégourié-Gonnard | ec160c0 | 2015-04-28 22:52:30 +0200 | [diff] [blame] | 438 | mbedtls_ctr_drbg_init( &ctr_drbg ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 439 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
| 440 | mbedtls_x509_crt_init( &cacert ); |
| 441 | mbedtls_x509_crt_init( &clicert ); |
| 442 | mbedtls_pk_init( &pkey ); |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 443 | #endif |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 444 | #if defined(MBEDTLS_SSL_ALPN) |
Paul Bakker | 525f875 | 2014-05-01 10:58:57 +0200 | [diff] [blame] | 445 | memset( (void * ) alpn_list, 0, sizeof( alpn_list ) ); |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 446 | #endif |
Paul Bakker | 1a207ec | 2011-02-06 13:22:40 +0000 | [diff] [blame] | 447 | |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 448 | if( argc == 0 ) |
| 449 | { |
| 450 | usage: |
Paul Bakker | fab5c82 | 2012-02-06 16:45:10 +0000 | [diff] [blame] | 451 | if( ret == 0 ) |
| 452 | ret = 1; |
| 453 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 454 | mbedtls_printf( USAGE ); |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 455 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 456 | list = mbedtls_ssl_list_ciphersuites(); |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 457 | while( *list ) |
| 458 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 459 | mbedtls_printf(" %-42s", mbedtls_ssl_get_ciphersuite_name( *list ) ); |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 460 | list++; |
| 461 | if( !*list ) |
| 462 | break; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 463 | mbedtls_printf(" %s\n", mbedtls_ssl_get_ciphersuite_name( *list ) ); |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 464 | list++; |
| 465 | } |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 466 | mbedtls_printf("\n"); |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 467 | goto exit; |
| 468 | } |
| 469 | |
| 470 | opt.server_name = DFL_SERVER_NAME; |
Manuel Pégourié-Gonnard | 0d8780b | 2014-02-25 11:11:26 +0100 | [diff] [blame] | 471 | opt.server_addr = DFL_SERVER_ADDR; |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 472 | opt.server_port = DFL_SERVER_PORT; |
| 473 | opt.debug_level = DFL_DEBUG_LEVEL; |
Manuel Pégourié-Gonnard | 5575316 | 2014-02-26 13:47:08 +0100 | [diff] [blame] | 474 | opt.nbio = DFL_NBIO; |
Manuel Pégourié-Gonnard | 6b65141 | 2014-10-01 18:29:03 +0200 | [diff] [blame] | 475 | opt.read_timeout = DFL_READ_TIMEOUT; |
Manuel Pégourié-Gonnard | f1e0df3 | 2014-10-02 14:02:32 +0200 | [diff] [blame] | 476 | opt.max_resend = DFL_MAX_RESEND; |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 477 | opt.request_page = DFL_REQUEST_PAGE; |
Paul Bakker | 93c32b2 | 2014-04-25 13:40:05 +0200 | [diff] [blame] | 478 | opt.request_size = DFL_REQUEST_SIZE; |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 479 | opt.ca_file = DFL_CA_FILE; |
Paul Bakker | 8d91458 | 2012-06-04 12:46:42 +0000 | [diff] [blame] | 480 | opt.ca_path = DFL_CA_PATH; |
Paul Bakker | 6796839 | 2010-07-18 08:28:20 +0000 | [diff] [blame] | 481 | opt.crt_file = DFL_CRT_FILE; |
| 482 | opt.key_file = DFL_KEY_FILE; |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 483 | opt.psk = DFL_PSK; |
| 484 | opt.psk_identity = DFL_PSK_IDENTITY; |
Manuel Pégourié-Gonnard | 70905a7 | 2015-09-16 11:08:34 +0200 | [diff] [blame] | 485 | opt.ecjpake_pw = DFL_ECJPAKE_PW; |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 486 | opt.force_ciphersuite[0]= DFL_FORCE_CIPHER; |
Paul Bakker | 48916f9 | 2012-09-16 19:57:18 +0000 | [diff] [blame] | 487 | opt.renegotiation = DFL_RENEGOTIATION; |
| 488 | opt.allow_legacy = DFL_ALLOW_LEGACY; |
Manuel Pégourié-Gonnard | 780d671 | 2014-02-20 17:19:59 +0100 | [diff] [blame] | 489 | opt.renegotiate = DFL_RENEGOTIATE; |
Manuel Pégourié-Gonnard | a8c0a0d | 2014-08-15 12:07:38 +0200 | [diff] [blame] | 490 | opt.exchanges = DFL_EXCHANGES; |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 491 | opt.min_version = DFL_MIN_VERSION; |
| 492 | opt.max_version = DFL_MAX_VERSION; |
Manuel Pégourié-Gonnard | bd47a58 | 2015-01-12 13:43:29 +0100 | [diff] [blame] | 493 | opt.arc4 = DFL_ARC4; |
Paul Bakker | 91ebfb5 | 2012-11-23 14:04:08 +0100 | [diff] [blame] | 494 | opt.auth_mode = DFL_AUTH_MODE; |
Manuel Pégourié-Gonnard | 0df6b1f | 2013-07-16 13:39:57 +0200 | [diff] [blame] | 495 | opt.mfl_code = DFL_MFL_CODE; |
Manuel Pégourié-Gonnard | e980a99 | 2013-07-19 11:08:52 +0200 | [diff] [blame] | 496 | opt.trunc_hmac = DFL_TRUNC_HMAC; |
Manuel Pégourié-Gonnard | c82ee35 | 2015-01-07 16:35:25 +0100 | [diff] [blame] | 497 | opt.recsplit = DFL_RECSPLIT; |
Manuel Pégourié-Gonnard | 9096682 | 2015-06-11 17:02:29 +0200 | [diff] [blame] | 498 | opt.dhmlen = DFL_DHMLEN; |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 499 | opt.reconnect = DFL_RECONNECT; |
Manuel Pégourié-Gonnard | c55a5b7 | 2014-02-20 22:50:56 +0100 | [diff] [blame] | 500 | opt.reco_delay = DFL_RECO_DELAY; |
Manuel Pégourié-Gonnard | dbd2307 | 2015-09-04 10:20:17 +0200 | [diff] [blame] | 501 | opt.reconnect_hard = DFL_RECONNECT_HARD; |
Manuel Pégourié-Gonnard | aa0d4d1 | 2013-08-03 13:02:31 +0200 | [diff] [blame] | 502 | opt.tickets = DFL_TICKETS; |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 503 | opt.alpn_string = DFL_ALPN_STRING; |
Manuel Pégourié-Gonnard | d823bd0 | 2014-10-01 14:40:56 +0200 | [diff] [blame] | 504 | opt.transport = DFL_TRANSPORT; |
| 505 | opt.hs_to_min = DFL_HS_TO_MIN; |
| 506 | opt.hs_to_max = DFL_HS_TO_MAX; |
Manuel Pégourié-Gonnard | 1cbd39d | 2014-10-20 13:34:59 +0200 | [diff] [blame] | 507 | opt.fallback = DFL_FALLBACK; |
Manuel Pégourié-Gonnard | 367381f | 2014-10-20 18:40:56 +0200 | [diff] [blame] | 508 | opt.extended_ms = DFL_EXTENDED_MS; |
Manuel Pégourié-Gonnard | 699cafa | 2014-10-27 13:57:03 +0100 | [diff] [blame] | 509 | opt.etm = DFL_ETM; |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 510 | |
| 511 | for( i = 1; i < argc; i++ ) |
| 512 | { |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 513 | p = argv[i]; |
| 514 | if( ( q = strchr( p, '=' ) ) == NULL ) |
| 515 | goto usage; |
| 516 | *q++ = '\0'; |
| 517 | |
| 518 | if( strcmp( p, "server_name" ) == 0 ) |
| 519 | opt.server_name = q; |
Manuel Pégourié-Gonnard | 0d8780b | 2014-02-25 11:11:26 +0100 | [diff] [blame] | 520 | else if( strcmp( p, "server_addr" ) == 0 ) |
| 521 | opt.server_addr = q; |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 522 | else if( strcmp( p, "server_port" ) == 0 ) |
Manuel Pégourié-Gonnard | c0d7494 | 2015-06-23 12:30:57 +0200 | [diff] [blame] | 523 | opt.server_port = q; |
Manuel Pégourié-Gonnard | e29fd4b | 2014-02-06 14:02:55 +0100 | [diff] [blame] | 524 | else if( strcmp( p, "dtls" ) == 0 ) |
| 525 | { |
| 526 | int t = atoi( q ); |
| 527 | if( t == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 528 | opt.transport = MBEDTLS_SSL_TRANSPORT_STREAM; |
Manuel Pégourié-Gonnard | e29fd4b | 2014-02-06 14:02:55 +0100 | [diff] [blame] | 529 | else if( t == 1 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 530 | opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM; |
Manuel Pégourié-Gonnard | e29fd4b | 2014-02-06 14:02:55 +0100 | [diff] [blame] | 531 | else |
| 532 | goto usage; |
| 533 | } |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 534 | else if( strcmp( p, "debug_level" ) == 0 ) |
| 535 | { |
| 536 | opt.debug_level = atoi( q ); |
| 537 | if( opt.debug_level < 0 || opt.debug_level > 65535 ) |
| 538 | goto usage; |
| 539 | } |
Manuel Pégourié-Gonnard | 5575316 | 2014-02-26 13:47:08 +0100 | [diff] [blame] | 540 | else if( strcmp( p, "nbio" ) == 0 ) |
| 541 | { |
| 542 | opt.nbio = atoi( q ); |
| 543 | if( opt.nbio < 0 || opt.nbio > 2 ) |
| 544 | goto usage; |
| 545 | } |
Manuel Pégourié-Gonnard | 6b65141 | 2014-10-01 18:29:03 +0200 | [diff] [blame] | 546 | else if( strcmp( p, "read_timeout" ) == 0 ) |
| 547 | opt.read_timeout = atoi( q ); |
Manuel Pégourié-Gonnard | f1e0df3 | 2014-10-02 14:02:32 +0200 | [diff] [blame] | 548 | else if( strcmp( p, "max_resend" ) == 0 ) |
| 549 | { |
| 550 | opt.max_resend = atoi( q ); |
| 551 | if( opt.max_resend < 0 ) |
| 552 | goto usage; |
| 553 | } |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 554 | else if( strcmp( p, "request_page" ) == 0 ) |
| 555 | opt.request_page = q; |
Paul Bakker | 93c32b2 | 2014-04-25 13:40:05 +0200 | [diff] [blame] | 556 | else if( strcmp( p, "request_size" ) == 0 ) |
| 557 | { |
| 558 | opt.request_size = atoi( q ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 559 | if( opt.request_size < 0 || opt.request_size > MBEDTLS_SSL_MAX_CONTENT_LEN ) |
Paul Bakker | 93c32b2 | 2014-04-25 13:40:05 +0200 | [diff] [blame] | 560 | goto usage; |
| 561 | } |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 562 | else if( strcmp( p, "ca_file" ) == 0 ) |
| 563 | opt.ca_file = q; |
Paul Bakker | 8d91458 | 2012-06-04 12:46:42 +0000 | [diff] [blame] | 564 | else if( strcmp( p, "ca_path" ) == 0 ) |
| 565 | opt.ca_path = q; |
Paul Bakker | 6796839 | 2010-07-18 08:28:20 +0000 | [diff] [blame] | 566 | else if( strcmp( p, "crt_file" ) == 0 ) |
| 567 | opt.crt_file = q; |
| 568 | else if( strcmp( p, "key_file" ) == 0 ) |
| 569 | opt.key_file = q; |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 570 | else if( strcmp( p, "psk" ) == 0 ) |
| 571 | opt.psk = q; |
| 572 | else if( strcmp( p, "psk_identity" ) == 0 ) |
| 573 | opt.psk_identity = q; |
Manuel Pégourié-Gonnard | 70905a7 | 2015-09-16 11:08:34 +0200 | [diff] [blame] | 574 | else if( strcmp( p, "ecjpake_pw" ) == 0 ) |
| 575 | opt.ecjpake_pw = q; |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 576 | else if( strcmp( p, "force_ciphersuite" ) == 0 ) |
| 577 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 578 | opt.force_ciphersuite[0] = mbedtls_ssl_get_ciphersuite_id( q ); |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 579 | |
Manuel Pégourié-Gonnard | 8de259b | 2014-06-11 14:19:06 +0200 | [diff] [blame] | 580 | if( opt.force_ciphersuite[0] == 0 ) |
Paul Bakker | fab5c82 | 2012-02-06 16:45:10 +0000 | [diff] [blame] | 581 | { |
| 582 | ret = 2; |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 583 | goto usage; |
Paul Bakker | fab5c82 | 2012-02-06 16:45:10 +0000 | [diff] [blame] | 584 | } |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 585 | opt.force_ciphersuite[1] = 0; |
| 586 | } |
Paul Bakker | 48916f9 | 2012-09-16 19:57:18 +0000 | [diff] [blame] | 587 | else if( strcmp( p, "renegotiation" ) == 0 ) |
| 588 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 589 | opt.renegotiation = (atoi( q )) ? MBEDTLS_SSL_RENEGOTIATION_ENABLED : |
| 590 | MBEDTLS_SSL_RENEGOTIATION_DISABLED; |
Paul Bakker | 48916f9 | 2012-09-16 19:57:18 +0000 | [diff] [blame] | 591 | } |
| 592 | else if( strcmp( p, "allow_legacy" ) == 0 ) |
| 593 | { |
Manuel Pégourié-Gonnard | 85d915b | 2014-11-03 20:10:36 +0100 | [diff] [blame] | 594 | switch( atoi( q ) ) |
| 595 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 596 | case -1: opt.allow_legacy = MBEDTLS_SSL_LEGACY_BREAK_HANDSHAKE; break; |
| 597 | case 0: opt.allow_legacy = MBEDTLS_SSL_LEGACY_NO_RENEGOTIATION; break; |
| 598 | case 1: opt.allow_legacy = MBEDTLS_SSL_LEGACY_ALLOW_RENEGOTIATION; break; |
Manuel Pégourié-Gonnard | 85d915b | 2014-11-03 20:10:36 +0100 | [diff] [blame] | 599 | default: goto usage; |
| 600 | } |
Paul Bakker | 48916f9 | 2012-09-16 19:57:18 +0000 | [diff] [blame] | 601 | } |
Manuel Pégourié-Gonnard | 780d671 | 2014-02-20 17:19:59 +0100 | [diff] [blame] | 602 | else if( strcmp( p, "renegotiate" ) == 0 ) |
| 603 | { |
| 604 | opt.renegotiate = atoi( q ); |
| 605 | if( opt.renegotiate < 0 || opt.renegotiate > 1 ) |
| 606 | goto usage; |
| 607 | } |
Manuel Pégourié-Gonnard | a8c0a0d | 2014-08-15 12:07:38 +0200 | [diff] [blame] | 608 | else if( strcmp( p, "exchanges" ) == 0 ) |
| 609 | { |
| 610 | opt.exchanges = atoi( q ); |
| 611 | if( opt.exchanges < 1 ) |
| 612 | goto usage; |
| 613 | } |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 614 | else if( strcmp( p, "reconnect" ) == 0 ) |
| 615 | { |
| 616 | opt.reconnect = atoi( q ); |
Manuel Pégourié-Gonnard | cf2e97e | 2013-08-02 15:04:36 +0200 | [diff] [blame] | 617 | if( opt.reconnect < 0 || opt.reconnect > 2 ) |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 618 | goto usage; |
| 619 | } |
Manuel Pégourié-Gonnard | c55a5b7 | 2014-02-20 22:50:56 +0100 | [diff] [blame] | 620 | else if( strcmp( p, "reco_delay" ) == 0 ) |
| 621 | { |
| 622 | opt.reco_delay = atoi( q ); |
| 623 | if( opt.reco_delay < 0 ) |
| 624 | goto usage; |
| 625 | } |
Manuel Pégourié-Gonnard | dbd2307 | 2015-09-04 10:20:17 +0200 | [diff] [blame] | 626 | else if( strcmp( p, "reconnect_hard" ) == 0 ) |
| 627 | { |
| 628 | opt.reconnect_hard = atoi( q ); |
| 629 | if( opt.reconnect_hard < 0 || opt.reconnect_hard > 1 ) |
| 630 | goto usage; |
| 631 | } |
Manuel Pégourié-Gonnard | aa0d4d1 | 2013-08-03 13:02:31 +0200 | [diff] [blame] | 632 | else if( strcmp( p, "tickets" ) == 0 ) |
| 633 | { |
| 634 | opt.tickets = atoi( q ); |
| 635 | if( opt.tickets < 0 || opt.tickets > 2 ) |
| 636 | goto usage; |
| 637 | } |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 638 | else if( strcmp( p, "alpn" ) == 0 ) |
| 639 | { |
| 640 | opt.alpn_string = q; |
| 641 | } |
Manuel Pégourié-Gonnard | 1cbd39d | 2014-10-20 13:34:59 +0200 | [diff] [blame] | 642 | else if( strcmp( p, "fallback" ) == 0 ) |
| 643 | { |
| 644 | switch( atoi( q ) ) |
| 645 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 646 | case 0: opt.fallback = MBEDTLS_SSL_IS_NOT_FALLBACK; break; |
| 647 | case 1: opt.fallback = MBEDTLS_SSL_IS_FALLBACK; break; |
Manuel Pégourié-Gonnard | 1cbd39d | 2014-10-20 13:34:59 +0200 | [diff] [blame] | 648 | default: goto usage; |
| 649 | } |
| 650 | } |
Manuel Pégourié-Gonnard | 367381f | 2014-10-20 18:40:56 +0200 | [diff] [blame] | 651 | else if( strcmp( p, "extended_ms" ) == 0 ) |
| 652 | { |
| 653 | switch( atoi( q ) ) |
| 654 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 655 | case 0: opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_DISABLED; break; |
| 656 | case 1: opt.extended_ms = MBEDTLS_SSL_EXTENDED_MS_ENABLED; break; |
Manuel Pégourié-Gonnard | 367381f | 2014-10-20 18:40:56 +0200 | [diff] [blame] | 657 | default: goto usage; |
| 658 | } |
| 659 | } |
Manuel Pégourié-Gonnard | 699cafa | 2014-10-27 13:57:03 +0100 | [diff] [blame] | 660 | else if( strcmp( p, "etm" ) == 0 ) |
| 661 | { |
| 662 | switch( atoi( q ) ) |
| 663 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 664 | case 0: opt.etm = MBEDTLS_SSL_ETM_DISABLED; break; |
| 665 | case 1: opt.etm = MBEDTLS_SSL_ETM_ENABLED; break; |
Manuel Pégourié-Gonnard | 699cafa | 2014-10-27 13:57:03 +0100 | [diff] [blame] | 666 | default: goto usage; |
| 667 | } |
| 668 | } |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 669 | else if( strcmp( p, "min_version" ) == 0 ) |
| 670 | { |
| 671 | if( strcmp( q, "ssl3" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 672 | opt.min_version = MBEDTLS_SSL_MINOR_VERSION_0; |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 673 | else if( strcmp( q, "tls1" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 674 | opt.min_version = MBEDTLS_SSL_MINOR_VERSION_1; |
Manuel Pégourié-Gonnard | 83218f1 | 2014-02-12 11:11:12 +0100 | [diff] [blame] | 675 | else if( strcmp( q, "tls1_1" ) == 0 || |
| 676 | strcmp( q, "dtls1" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 677 | opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2; |
Manuel Pégourié-Gonnard | 83218f1 | 2014-02-12 11:11:12 +0100 | [diff] [blame] | 678 | else if( strcmp( q, "tls1_2" ) == 0 || |
| 679 | strcmp( q, "dtls1_2" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 680 | opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3; |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 681 | else |
| 682 | goto usage; |
| 683 | } |
| 684 | else if( strcmp( p, "max_version" ) == 0 ) |
| 685 | { |
| 686 | if( strcmp( q, "ssl3" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 687 | opt.max_version = MBEDTLS_SSL_MINOR_VERSION_0; |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 688 | else if( strcmp( q, "tls1" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 689 | opt.max_version = MBEDTLS_SSL_MINOR_VERSION_1; |
Manuel Pégourié-Gonnard | 83218f1 | 2014-02-12 11:11:12 +0100 | [diff] [blame] | 690 | else if( strcmp( q, "tls1_1" ) == 0 || |
| 691 | strcmp( q, "dtls1" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 692 | opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2; |
Manuel Pégourié-Gonnard | 83218f1 | 2014-02-12 11:11:12 +0100 | [diff] [blame] | 693 | else if( strcmp( q, "tls1_2" ) == 0 || |
| 694 | strcmp( q, "dtls1_2" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 695 | opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3; |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 696 | else |
| 697 | goto usage; |
| 698 | } |
Manuel Pégourié-Gonnard | bd47a58 | 2015-01-12 13:43:29 +0100 | [diff] [blame] | 699 | else if( strcmp( p, "arc4" ) == 0 ) |
| 700 | { |
| 701 | switch( atoi( q ) ) |
| 702 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 703 | case 0: opt.arc4 = MBEDTLS_SSL_ARC4_DISABLED; break; |
| 704 | case 1: opt.arc4 = MBEDTLS_SSL_ARC4_ENABLED; break; |
Manuel Pégourié-Gonnard | bd47a58 | 2015-01-12 13:43:29 +0100 | [diff] [blame] | 705 | default: goto usage; |
| 706 | } |
| 707 | } |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 708 | else if( strcmp( p, "force_version" ) == 0 ) |
| 709 | { |
| 710 | if( strcmp( q, "ssl3" ) == 0 ) |
| 711 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 712 | opt.min_version = MBEDTLS_SSL_MINOR_VERSION_0; |
| 713 | opt.max_version = MBEDTLS_SSL_MINOR_VERSION_0; |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 714 | } |
| 715 | else if( strcmp( q, "tls1" ) == 0 ) |
| 716 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 717 | opt.min_version = MBEDTLS_SSL_MINOR_VERSION_1; |
| 718 | opt.max_version = MBEDTLS_SSL_MINOR_VERSION_1; |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 719 | } |
Manuel Pégourié-Gonnard | fe3f73b | 2014-03-26 12:16:44 +0100 | [diff] [blame] | 720 | else if( strcmp( q, "tls1_1" ) == 0 ) |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 721 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 722 | opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2; |
| 723 | opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2; |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 724 | } |
Manuel Pégourié-Gonnard | fe3f73b | 2014-03-26 12:16:44 +0100 | [diff] [blame] | 725 | else if( strcmp( q, "tls1_2" ) == 0 ) |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 726 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 727 | opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3; |
| 728 | opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3; |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 729 | } |
Manuel Pégourié-Gonnard | fe3f73b | 2014-03-26 12:16:44 +0100 | [diff] [blame] | 730 | else if( strcmp( q, "dtls1" ) == 0 ) |
| 731 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 732 | opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2; |
| 733 | opt.max_version = MBEDTLS_SSL_MINOR_VERSION_2; |
| 734 | opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM; |
Manuel Pégourié-Gonnard | fe3f73b | 2014-03-26 12:16:44 +0100 | [diff] [blame] | 735 | } |
| 736 | else if( strcmp( q, "dtls1_2" ) == 0 ) |
| 737 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 738 | opt.min_version = MBEDTLS_SSL_MINOR_VERSION_3; |
| 739 | opt.max_version = MBEDTLS_SSL_MINOR_VERSION_3; |
| 740 | opt.transport = MBEDTLS_SSL_TRANSPORT_DATAGRAM; |
Manuel Pégourié-Gonnard | fe3f73b | 2014-03-26 12:16:44 +0100 | [diff] [blame] | 741 | } |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 742 | else |
| 743 | goto usage; |
| 744 | } |
Paul Bakker | 91ebfb5 | 2012-11-23 14:04:08 +0100 | [diff] [blame] | 745 | else if( strcmp( p, "auth_mode" ) == 0 ) |
| 746 | { |
| 747 | if( strcmp( q, "none" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 748 | opt.auth_mode = MBEDTLS_SSL_VERIFY_NONE; |
Paul Bakker | 91ebfb5 | 2012-11-23 14:04:08 +0100 | [diff] [blame] | 749 | else if( strcmp( q, "optional" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 750 | opt.auth_mode = MBEDTLS_SSL_VERIFY_OPTIONAL; |
Paul Bakker | 91ebfb5 | 2012-11-23 14:04:08 +0100 | [diff] [blame] | 751 | else if( strcmp( q, "required" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 752 | opt.auth_mode = MBEDTLS_SSL_VERIFY_REQUIRED; |
Paul Bakker | 91ebfb5 | 2012-11-23 14:04:08 +0100 | [diff] [blame] | 753 | else |
| 754 | goto usage; |
| 755 | } |
Manuel Pégourié-Gonnard | 0df6b1f | 2013-07-16 13:39:57 +0200 | [diff] [blame] | 756 | else if( strcmp( p, "max_frag_len" ) == 0 ) |
| 757 | { |
| 758 | if( strcmp( q, "512" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 759 | opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_512; |
Manuel Pégourié-Gonnard | 0df6b1f | 2013-07-16 13:39:57 +0200 | [diff] [blame] | 760 | else if( strcmp( q, "1024" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 761 | opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_1024; |
Manuel Pégourié-Gonnard | 0df6b1f | 2013-07-16 13:39:57 +0200 | [diff] [blame] | 762 | else if( strcmp( q, "2048" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 763 | opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_2048; |
Manuel Pégourié-Gonnard | 0df6b1f | 2013-07-16 13:39:57 +0200 | [diff] [blame] | 764 | else if( strcmp( q, "4096" ) == 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 765 | opt.mfl_code = MBEDTLS_SSL_MAX_FRAG_LEN_4096; |
Manuel Pégourié-Gonnard | 0df6b1f | 2013-07-16 13:39:57 +0200 | [diff] [blame] | 766 | else |
| 767 | goto usage; |
| 768 | } |
Manuel Pégourié-Gonnard | e980a99 | 2013-07-19 11:08:52 +0200 | [diff] [blame] | 769 | else if( strcmp( p, "trunc_hmac" ) == 0 ) |
| 770 | { |
Manuel Pégourié-Gonnard | 265fe99 | 2015-01-09 12:43:35 +0100 | [diff] [blame] | 771 | switch( atoi( q ) ) |
| 772 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 773 | case 0: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_DISABLED; break; |
| 774 | case 1: opt.trunc_hmac = MBEDTLS_SSL_TRUNC_HMAC_ENABLED; break; |
Manuel Pégourié-Gonnard | 265fe99 | 2015-01-09 12:43:35 +0100 | [diff] [blame] | 775 | default: goto usage; |
| 776 | } |
Manuel Pégourié-Gonnard | e980a99 | 2013-07-19 11:08:52 +0200 | [diff] [blame] | 777 | } |
Manuel Pégourié-Gonnard | d823bd0 | 2014-10-01 14:40:56 +0200 | [diff] [blame] | 778 | else if( strcmp( p, "hs_timeout" ) == 0 ) |
| 779 | { |
| 780 | if( ( p = strchr( q, '-' ) ) == NULL ) |
| 781 | goto usage; |
| 782 | *p++ = '\0'; |
| 783 | opt.hs_to_min = atoi( q ); |
| 784 | opt.hs_to_max = atoi( p ); |
| 785 | if( opt.hs_to_min == 0 || opt.hs_to_max < opt.hs_to_min ) |
| 786 | goto usage; |
| 787 | } |
Manuel Pégourié-Gonnard | c82ee35 | 2015-01-07 16:35:25 +0100 | [diff] [blame] | 788 | else if( strcmp( p, "recsplit" ) == 0 ) |
| 789 | { |
| 790 | opt.recsplit = atoi( q ); |
| 791 | if( opt.recsplit < 0 || opt.recsplit > 1 ) |
| 792 | goto usage; |
| 793 | } |
Manuel Pégourié-Gonnard | 9096682 | 2015-06-11 17:02:29 +0200 | [diff] [blame] | 794 | else if( strcmp( p, "dhmlen" ) == 0 ) |
| 795 | { |
| 796 | opt.dhmlen = atoi( q ); |
| 797 | if( opt.dhmlen < 0 ) |
| 798 | goto usage; |
| 799 | } |
Paul Bakker | 9caf2d2 | 2010-02-18 19:37:19 +0000 | [diff] [blame] | 800 | else |
| 801 | goto usage; |
| 802 | } |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 803 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 804 | #if defined(MBEDTLS_DEBUG_C) |
| 805 | mbedtls_debug_set_threshold( opt.debug_level ); |
Paul Bakker | c73079a | 2014-04-25 16:34:30 +0200 | [diff] [blame] | 806 | #endif |
| 807 | |
Paul Bakker | c1516be | 2013-06-29 16:01:32 +0200 | [diff] [blame] | 808 | if( opt.force_ciphersuite[0] > 0 ) |
| 809 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 810 | const mbedtls_ssl_ciphersuite_t *ciphersuite_info; |
| 811 | ciphersuite_info = mbedtls_ssl_ciphersuite_from_id( opt.force_ciphersuite[0] ); |
Paul Bakker | c1516be | 2013-06-29 16:01:32 +0200 | [diff] [blame] | 812 | |
Paul Bakker | 66c4810 | 2013-07-26 14:05:32 +0200 | [diff] [blame] | 813 | if( opt.max_version != -1 && |
| 814 | ciphersuite_info->min_minor_ver > opt.max_version ) |
| 815 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 816 | mbedtls_printf("forced ciphersuite not allowed with this protocol version\n"); |
Paul Bakker | 66c4810 | 2013-07-26 14:05:32 +0200 | [diff] [blame] | 817 | ret = 2; |
| 818 | goto usage; |
| 819 | } |
| 820 | if( opt.min_version != -1 && |
Paul Bakker | c1516be | 2013-06-29 16:01:32 +0200 | [diff] [blame] | 821 | ciphersuite_info->max_minor_ver < opt.min_version ) |
| 822 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 823 | mbedtls_printf("forced ciphersuite not allowed with this protocol version\n"); |
Paul Bakker | c1516be | 2013-06-29 16:01:32 +0200 | [diff] [blame] | 824 | ret = 2; |
| 825 | goto usage; |
| 826 | } |
Manuel Pégourié-Gonnard | 798f15a | 2014-03-26 18:12:04 +0100 | [diff] [blame] | 827 | |
| 828 | /* If the server selects a version that's not supported by |
| 829 | * this suite, then there will be no common ciphersuite... */ |
| 830 | if( opt.max_version == -1 || |
| 831 | opt.max_version > ciphersuite_info->max_minor_ver ) |
| 832 | { |
Paul Bakker | 66c4810 | 2013-07-26 14:05:32 +0200 | [diff] [blame] | 833 | opt.max_version = ciphersuite_info->max_minor_ver; |
Manuel Pégourié-Gonnard | 798f15a | 2014-03-26 18:12:04 +0100 | [diff] [blame] | 834 | } |
Paul Bakker | 66c4810 | 2013-07-26 14:05:32 +0200 | [diff] [blame] | 835 | if( opt.min_version < ciphersuite_info->min_minor_ver ) |
Manuel Pégourié-Gonnard | 798f15a | 2014-03-26 18:12:04 +0100 | [diff] [blame] | 836 | { |
Paul Bakker | 66c4810 | 2013-07-26 14:05:32 +0200 | [diff] [blame] | 837 | opt.min_version = ciphersuite_info->min_minor_ver; |
Manuel Pégourié-Gonnard | 798f15a | 2014-03-26 18:12:04 +0100 | [diff] [blame] | 838 | /* DTLS starts with TLS 1.1 */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 839 | if( opt.transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM && |
| 840 | opt.min_version < MBEDTLS_SSL_MINOR_VERSION_2 ) |
| 841 | opt.min_version = MBEDTLS_SSL_MINOR_VERSION_2; |
Manuel Pégourié-Gonnard | 798f15a | 2014-03-26 18:12:04 +0100 | [diff] [blame] | 842 | } |
Manuel Pégourié-Gonnard | d42b7c8 | 2015-03-20 19:44:04 +0000 | [diff] [blame] | 843 | |
| 844 | /* Enable RC4 if needed and not explicitly disabled */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 845 | if( ciphersuite_info->cipher == MBEDTLS_CIPHER_ARC4_128 ) |
Manuel Pégourié-Gonnard | d42b7c8 | 2015-03-20 19:44:04 +0000 | [diff] [blame] | 846 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 847 | if( opt.arc4 == MBEDTLS_SSL_ARC4_DISABLED ) |
Manuel Pégourié-Gonnard | d42b7c8 | 2015-03-20 19:44:04 +0000 | [diff] [blame] | 848 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 849 | mbedtls_printf("forced RC4 ciphersuite with RC4 disabled\n"); |
Manuel Pégourié-Gonnard | d42b7c8 | 2015-03-20 19:44:04 +0000 | [diff] [blame] | 850 | ret = 2; |
| 851 | goto usage; |
| 852 | } |
| 853 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 854 | opt.arc4 = MBEDTLS_SSL_ARC4_ENABLED; |
Manuel Pégourié-Gonnard | d42b7c8 | 2015-03-20 19:44:04 +0000 | [diff] [blame] | 855 | } |
Paul Bakker | c1516be | 2013-06-29 16:01:32 +0200 | [diff] [blame] | 856 | } |
| 857 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 858 | #if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED) |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 859 | /* |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 860 | * Unhexify the pre-shared key if any is given |
| 861 | */ |
| 862 | if( strlen( opt.psk ) ) |
| 863 | { |
| 864 | unsigned char c; |
| 865 | size_t j; |
| 866 | |
| 867 | if( strlen( opt.psk ) % 2 != 0 ) |
| 868 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 869 | mbedtls_printf("pre-shared key not valid hex\n"); |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 870 | goto exit; |
| 871 | } |
| 872 | |
| 873 | psk_len = strlen( opt.psk ) / 2; |
| 874 | |
| 875 | for( j = 0; j < strlen( opt.psk ); j += 2 ) |
| 876 | { |
| 877 | c = opt.psk[j]; |
| 878 | if( c >= '0' && c <= '9' ) |
| 879 | c -= '0'; |
| 880 | else if( c >= 'a' && c <= 'f' ) |
| 881 | c -= 'a' - 10; |
| 882 | else if( c >= 'A' && c <= 'F' ) |
| 883 | c -= 'A' - 10; |
| 884 | else |
| 885 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 886 | mbedtls_printf("pre-shared key not valid hex\n"); |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 887 | goto exit; |
| 888 | } |
| 889 | psk[ j / 2 ] = c << 4; |
| 890 | |
| 891 | c = opt.psk[j + 1]; |
| 892 | if( c >= '0' && c <= '9' ) |
| 893 | c -= '0'; |
| 894 | else if( c >= 'a' && c <= 'f' ) |
| 895 | c -= 'a' - 10; |
| 896 | else if( c >= 'A' && c <= 'F' ) |
| 897 | c -= 'A' - 10; |
| 898 | else |
| 899 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 900 | mbedtls_printf("pre-shared key not valid hex\n"); |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 901 | goto exit; |
| 902 | } |
| 903 | psk[ j / 2 ] |= c; |
| 904 | } |
| 905 | } |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 906 | #endif /* MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED */ |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 907 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 908 | #if defined(MBEDTLS_SSL_ALPN) |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 909 | if( opt.alpn_string != NULL ) |
| 910 | { |
| 911 | p = (char *) opt.alpn_string; |
| 912 | i = 0; |
| 913 | |
| 914 | /* Leave room for a final NULL in alpn_list */ |
| 915 | while( i < (int) sizeof alpn_list - 1 && *p != '\0' ) |
| 916 | { |
| 917 | alpn_list[i++] = p; |
| 918 | |
| 919 | /* Terminate the current string and move on to next one */ |
| 920 | while( *p != ',' && *p != '\0' ) |
| 921 | p++; |
| 922 | if( *p == ',' ) |
| 923 | *p++ = '\0'; |
| 924 | } |
| 925 | } |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 926 | #endif /* MBEDTLS_SSL_ALPN */ |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 927 | |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 928 | /* |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 929 | * 0. Initialize the RNG and the session data |
| 930 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 931 | mbedtls_printf( "\n . Seeding the random number generator..." ); |
Paul Bakker | 508ad5a | 2011-12-04 17:09:26 +0000 | [diff] [blame] | 932 | fflush( stdout ); |
| 933 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 934 | mbedtls_entropy_init( &entropy ); |
Manuel Pégourié-Gonnard | ec160c0 | 2015-04-28 22:52:30 +0200 | [diff] [blame] | 935 | if( ( ret = mbedtls_ctr_drbg_seed( &ctr_drbg, mbedtls_entropy_func, &entropy, |
Paul Bakker | ef3f8c7 | 2013-06-24 13:01:08 +0200 | [diff] [blame] | 936 | (const unsigned char *) pers, |
| 937 | strlen( pers ) ) ) != 0 ) |
Paul Bakker | 508ad5a | 2011-12-04 17:09:26 +0000 | [diff] [blame] | 938 | { |
Manuel Pégourié-Gonnard | ec160c0 | 2015-04-28 22:52:30 +0200 | [diff] [blame] | 939 | mbedtls_printf( " failed\n ! mbedtls_ctr_drbg_seed returned -0x%x\n", -ret ); |
Paul Bakker | 508ad5a | 2011-12-04 17:09:26 +0000 | [diff] [blame] | 940 | goto exit; |
| 941 | } |
| 942 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 943 | mbedtls_printf( " ok\n" ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 944 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 945 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 946 | /* |
| 947 | * 1.1. Load the trusted CA |
| 948 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 949 | mbedtls_printf( " . Loading the CA root certificate ..." ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 950 | fflush( stdout ); |
| 951 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 952 | #if defined(MBEDTLS_FS_IO) |
Paul Bakker | 8d91458 | 2012-06-04 12:46:42 +0000 | [diff] [blame] | 953 | if( strlen( opt.ca_path ) ) |
Manuel Pégourié-Gonnard | 3e1b178 | 2014-02-27 13:35:00 +0100 | [diff] [blame] | 954 | if( strcmp( opt.ca_path, "none" ) == 0 ) |
| 955 | ret = 0; |
| 956 | else |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 957 | ret = mbedtls_x509_crt_parse_path( &cacert, opt.ca_path ); |
Paul Bakker | 8d91458 | 2012-06-04 12:46:42 +0000 | [diff] [blame] | 958 | else if( strlen( opt.ca_file ) ) |
Manuel Pégourié-Gonnard | 3e1b178 | 2014-02-27 13:35:00 +0100 | [diff] [blame] | 959 | if( strcmp( opt.ca_file, "none" ) == 0 ) |
| 960 | ret = 0; |
| 961 | else |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 962 | ret = mbedtls_x509_crt_parse_file( &cacert, opt.ca_file ); |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 963 | else |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 964 | #endif |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 965 | #if defined(MBEDTLS_CERTS_C) |
| 966 | for( i = 0; mbedtls_test_cas[i] != NULL; i++ ) |
Manuel Pégourié-Gonnard | 2f16506 | 2015-03-27 10:20:26 +0100 | [diff] [blame] | 967 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 968 | ret = mbedtls_x509_crt_parse( &cacert, |
| 969 | (const unsigned char *) mbedtls_test_cas[i], |
| 970 | mbedtls_test_cas_len[i] ); |
Manuel Pégourié-Gonnard | 2f16506 | 2015-03-27 10:20:26 +0100 | [diff] [blame] | 971 | if( ret != 0 ) |
| 972 | break; |
| 973 | } |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 974 | #else |
| 975 | { |
| 976 | ret = 1; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 977 | mbedtls_printf("MBEDTLS_CERTS_C not defined."); |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 978 | } |
| 979 | #endif |
Paul Bakker | 4248823 | 2012-05-16 08:21:05 +0000 | [diff] [blame] | 980 | if( ret < 0 ) |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 981 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 982 | mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n", -ret ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 983 | goto exit; |
| 984 | } |
| 985 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 986 | mbedtls_printf( " ok (%d skipped)\n", ret ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 987 | |
| 988 | /* |
| 989 | * 1.2. Load own certificate and private key |
| 990 | * |
| 991 | * (can be skipped if client authentication is not required) |
| 992 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 993 | mbedtls_printf( " . Loading the client cert. and key..." ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 994 | fflush( stdout ); |
| 995 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 996 | #if defined(MBEDTLS_FS_IO) |
Paul Bakker | 6796839 | 2010-07-18 08:28:20 +0000 | [diff] [blame] | 997 | if( strlen( opt.crt_file ) ) |
Manuel Pégourié-Gonnard | 3e1b178 | 2014-02-27 13:35:00 +0100 | [diff] [blame] | 998 | if( strcmp( opt.crt_file, "none" ) == 0 ) |
| 999 | ret = 0; |
| 1000 | else |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1001 | ret = mbedtls_x509_crt_parse_file( &clicert, opt.crt_file ); |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 1002 | else |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 1003 | #endif |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1004 | #if defined(MBEDTLS_CERTS_C) |
| 1005 | ret = mbedtls_x509_crt_parse( &clicert, (const unsigned char *) mbedtls_test_cli_crt, |
| 1006 | mbedtls_test_cli_crt_len ); |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 1007 | #else |
| 1008 | { |
| 1009 | ret = 1; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1010 | mbedtls_printf("MBEDTLS_CERTS_C not defined."); |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 1011 | } |
| 1012 | #endif |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1013 | if( ret != 0 ) |
| 1014 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1015 | mbedtls_printf( " failed\n ! mbedtls_x509_crt_parse returned -0x%x\n\n", -ret ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1016 | goto exit; |
| 1017 | } |
| 1018 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1019 | #if defined(MBEDTLS_FS_IO) |
Paul Bakker | 6796839 | 2010-07-18 08:28:20 +0000 | [diff] [blame] | 1020 | if( strlen( opt.key_file ) ) |
Manuel Pégourié-Gonnard | 3e1b178 | 2014-02-27 13:35:00 +0100 | [diff] [blame] | 1021 | if( strcmp( opt.key_file, "none" ) == 0 ) |
| 1022 | ret = 0; |
| 1023 | else |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1024 | ret = mbedtls_pk_parse_keyfile( &pkey, opt.key_file, "" ); |
Paul Bakker | 6796839 | 2010-07-18 08:28:20 +0000 | [diff] [blame] | 1025 | else |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 1026 | #endif |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1027 | #if defined(MBEDTLS_CERTS_C) |
| 1028 | ret = mbedtls_pk_parse_key( &pkey, (const unsigned char *) mbedtls_test_cli_key, |
| 1029 | mbedtls_test_cli_key_len, NULL, 0 ); |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 1030 | #else |
| 1031 | { |
| 1032 | ret = 1; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1033 | mbedtls_printf("MBEDTLS_CERTS_C not defined."); |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 1034 | } |
| 1035 | #endif |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1036 | if( ret != 0 ) |
| 1037 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1038 | mbedtls_printf( " failed\n ! mbedtls_pk_parse_key returned -0x%x\n\n", -ret ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1039 | goto exit; |
| 1040 | } |
| 1041 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1042 | mbedtls_printf( " ok\n" ); |
| 1043 | #endif /* MBEDTLS_X509_CRT_PARSE_C */ |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1044 | |
| 1045 | /* |
| 1046 | * 2. Start the connection |
| 1047 | */ |
Manuel Pégourié-Gonnard | 0d8780b | 2014-02-25 11:11:26 +0100 | [diff] [blame] | 1048 | if( opt.server_addr == NULL) |
| 1049 | opt.server_addr = opt.server_name; |
| 1050 | |
Manuel Pégourié-Gonnard | c0d7494 | 2015-06-23 12:30:57 +0200 | [diff] [blame] | 1051 | mbedtls_printf( " . Connecting to %s/%s/%s...", |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1052 | opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ? "tcp" : "udp", |
Manuel Pégourié-Gonnard | 8a06d9c | 2014-03-23 18:23:41 +0100 | [diff] [blame] | 1053 | opt.server_addr, opt.server_port ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1054 | fflush( stdout ); |
| 1055 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1056 | if( ( ret = mbedtls_net_connect( &server_fd, opt.server_addr, opt.server_port, |
| 1057 | opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ? |
| 1058 | MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP ) ) != 0 ) |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1059 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1060 | mbedtls_printf( " failed\n ! mbedtls_net_connect returned -0x%x\n\n", -ret ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1061 | goto exit; |
| 1062 | } |
| 1063 | |
Manuel Pégourié-Gonnard | 5575316 | 2014-02-26 13:47:08 +0100 | [diff] [blame] | 1064 | if( opt.nbio > 0 ) |
Manuel Pégourié-Gonnard | 5db6432 | 2015-06-30 15:40:39 +0200 | [diff] [blame] | 1065 | ret = mbedtls_net_set_nonblock( &server_fd ); |
Manuel Pégourié-Gonnard | 5575316 | 2014-02-26 13:47:08 +0100 | [diff] [blame] | 1066 | else |
Manuel Pégourié-Gonnard | 5db6432 | 2015-06-30 15:40:39 +0200 | [diff] [blame] | 1067 | ret = mbedtls_net_set_block( &server_fd ); |
Manuel Pégourié-Gonnard | 5575316 | 2014-02-26 13:47:08 +0100 | [diff] [blame] | 1068 | if( ret != 0 ) |
| 1069 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1070 | mbedtls_printf( " failed\n ! net_set_(non)block() returned -0x%x\n\n", -ret ); |
Manuel Pégourié-Gonnard | 5575316 | 2014-02-26 13:47:08 +0100 | [diff] [blame] | 1071 | goto exit; |
| 1072 | } |
| 1073 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1074 | mbedtls_printf( " ok\n" ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1075 | |
| 1076 | /* |
| 1077 | * 3. Setup stuff |
| 1078 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1079 | mbedtls_printf( " . Setting up the SSL/TLS structure..." ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1080 | fflush( stdout ); |
| 1081 | |
Manuel Pégourié-Gonnard | 419d5ae | 2015-05-04 19:32:36 +0200 | [diff] [blame] | 1082 | if( ( ret = mbedtls_ssl_config_defaults( &conf, |
| 1083 | MBEDTLS_SSL_IS_CLIENT, |
Manuel Pégourié-Gonnard | b31c5f6 | 2015-06-17 13:53:47 +0200 | [diff] [blame] | 1084 | opt.transport, |
| 1085 | MBEDTLS_SSL_PRESET_DEFAULT ) ) != 0 ) |
Manuel Pégourié-Gonnard | def0bbe | 2015-05-04 14:56:36 +0200 | [diff] [blame] | 1086 | { |
| 1087 | mbedtls_printf( " failed\n ! mbedtls_ssl_config_defaults returned -0x%x\n\n", -ret ); |
| 1088 | goto exit; |
| 1089 | } |
| 1090 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1091 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
Paul Bakker | 915275b | 2012-09-28 07:10:55 +0000 | [diff] [blame] | 1092 | if( opt.debug_level > 0 ) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1093 | mbedtls_ssl_conf_verify( &conf, my_verify, NULL ); |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 1094 | #endif |
Paul Bakker | 915275b | 2012-09-28 07:10:55 +0000 | [diff] [blame] | 1095 | |
Manuel Pégourié-Gonnard | fa44f20 | 2015-03-27 17:52:25 +0100 | [diff] [blame] | 1096 | if( opt.auth_mode != DFL_AUTH_MODE ) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1097 | mbedtls_ssl_conf_authmode( &conf, opt.auth_mode ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1098 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1099 | #if defined(MBEDTLS_SSL_PROTO_DTLS) |
Manuel Pégourié-Gonnard | d823bd0 | 2014-10-01 14:40:56 +0200 | [diff] [blame] | 1100 | if( opt.hs_to_min != DFL_HS_TO_MIN || opt.hs_to_max != DFL_HS_TO_MAX ) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1101 | mbedtls_ssl_conf_handshake_timeout( &conf, opt.hs_to_min, opt.hs_to_max ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1102 | #endif /* MBEDTLS_SSL_PROTO_DTLS */ |
Manuel Pégourié-Gonnard | d823bd0 | 2014-10-01 14:40:56 +0200 | [diff] [blame] | 1103 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1104 | #if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1105 | if( ( ret = mbedtls_ssl_conf_max_frag_len( &conf, opt.mfl_code ) ) != 0 ) |
Manuel Pégourié-Gonnard | c5fd391 | 2014-07-08 14:05:52 +0200 | [diff] [blame] | 1106 | { |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1107 | mbedtls_printf( " failed\n ! mbedtls_ssl_conf_max_frag_len returned %d\n\n", ret ); |
Manuel Pégourié-Gonnard | c5fd391 | 2014-07-08 14:05:52 +0200 | [diff] [blame] | 1108 | goto exit; |
| 1109 | } |
Paul Bakker | 05decb2 | 2013-08-15 13:33:48 +0200 | [diff] [blame] | 1110 | #endif |
Manuel Pégourié-Gonnard | 0df6b1f | 2013-07-16 13:39:57 +0200 | [diff] [blame] | 1111 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1112 | #if defined(MBEDTLS_SSL_TRUNCATED_HMAC) |
Manuel Pégourié-Gonnard | 265fe99 | 2015-01-09 12:43:35 +0100 | [diff] [blame] | 1113 | if( opt.trunc_hmac != DFL_TRUNC_HMAC ) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1114 | mbedtls_ssl_conf_truncated_hmac( &conf, opt.trunc_hmac ); |
Paul Bakker | 1f2bc62 | 2013-08-15 13:45:55 +0200 | [diff] [blame] | 1115 | #endif |
Manuel Pégourié-Gonnard | e980a99 | 2013-07-19 11:08:52 +0200 | [diff] [blame] | 1116 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1117 | #if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET) |
Manuel Pégourié-Gonnard | 367381f | 2014-10-20 18:40:56 +0200 | [diff] [blame] | 1118 | if( opt.extended_ms != DFL_EXTENDED_MS ) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1119 | mbedtls_ssl_conf_extended_master_secret( &conf, opt.extended_ms ); |
Manuel Pégourié-Gonnard | 367381f | 2014-10-20 18:40:56 +0200 | [diff] [blame] | 1120 | #endif |
| 1121 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1122 | #if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC) |
Manuel Pégourié-Gonnard | 699cafa | 2014-10-27 13:57:03 +0100 | [diff] [blame] | 1123 | if( opt.etm != DFL_ETM ) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1124 | mbedtls_ssl_conf_encrypt_then_mac( &conf, opt.etm ); |
Manuel Pégourié-Gonnard | 699cafa | 2014-10-27 13:57:03 +0100 | [diff] [blame] | 1125 | #endif |
| 1126 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1127 | #if defined(MBEDTLS_SSL_CBC_RECORD_SPLITTING) |
Manuel Pégourié-Gonnard | c82ee35 | 2015-01-07 16:35:25 +0100 | [diff] [blame] | 1128 | if( opt.recsplit != DFL_RECSPLIT ) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1129 | mbedtls_ssl_conf_cbc_record_splitting( &conf, opt.recsplit |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1130 | ? MBEDTLS_SSL_CBC_RECORD_SPLITTING_ENABLED |
| 1131 | : MBEDTLS_SSL_CBC_RECORD_SPLITTING_DISABLED ); |
Manuel Pégourié-Gonnard | c82ee35 | 2015-01-07 16:35:25 +0100 | [diff] [blame] | 1132 | #endif |
| 1133 | |
Manuel Pégourié-Gonnard | 9096682 | 2015-06-11 17:02:29 +0200 | [diff] [blame] | 1134 | #if defined(MBEDTLS_DHM_C) |
| 1135 | if( opt.dhmlen != DFL_DHMLEN ) |
| 1136 | mbedtls_ssl_conf_dhm_min_bitlen( &conf, opt.dhmlen ); |
| 1137 | #endif |
| 1138 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1139 | #if defined(MBEDTLS_SSL_ALPN) |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 1140 | if( opt.alpn_string != NULL ) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1141 | if( ( ret = mbedtls_ssl_conf_alpn_protocols( &conf, alpn_list ) ) != 0 ) |
Manuel Pégourié-Gonnard | c5fd391 | 2014-07-08 14:05:52 +0200 | [diff] [blame] | 1142 | { |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1143 | mbedtls_printf( " failed\n ! mbedtls_ssl_conf_alpn_protocols returned %d\n\n", ret ); |
Manuel Pégourié-Gonnard | c5fd391 | 2014-07-08 14:05:52 +0200 | [diff] [blame] | 1144 | goto exit; |
| 1145 | } |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 1146 | #endif |
| 1147 | |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1148 | mbedtls_ssl_conf_rng( &conf, mbedtls_ctr_drbg_random, &ctr_drbg ); |
| 1149 | mbedtls_ssl_conf_dbg( &conf, my_debug, stdout ); |
Manuel Pégourié-Gonnard | 5575316 | 2014-02-26 13:47:08 +0100 | [diff] [blame] | 1150 | |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1151 | mbedtls_ssl_conf_read_timeout( &conf, opt.read_timeout ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1152 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1153 | #if defined(MBEDTLS_SSL_SESSION_TICKETS) |
Manuel Pégourié-Gonnard | b596abf | 2015-05-20 10:45:29 +0200 | [diff] [blame] | 1154 | mbedtls_ssl_conf_session_tickets( &conf, opt.tickets ); |
Paul Bakker | a503a63 | 2013-08-14 13:48:06 +0200 | [diff] [blame] | 1155 | #endif |
Manuel Pégourié-Gonnard | aa0d4d1 | 2013-08-03 13:02:31 +0200 | [diff] [blame] | 1156 | |
Paul Bakker | 645ce3a | 2012-10-31 12:32:41 +0000 | [diff] [blame] | 1157 | if( opt.force_ciphersuite[0] != DFL_FORCE_CIPHER ) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1158 | mbedtls_ssl_conf_ciphersuites( &conf, opt.force_ciphersuite ); |
Manuel Pégourié-Gonnard | d42b7c8 | 2015-03-20 19:44:04 +0000 | [diff] [blame] | 1159 | |
Manuel Pégourié-Gonnard | 66dc555 | 2015-05-14 12:28:21 +0200 | [diff] [blame] | 1160 | #if defined(MBEDTLS_ARC4_C) |
Manuel Pégourié-Gonnard | d42b7c8 | 2015-03-20 19:44:04 +0000 | [diff] [blame] | 1161 | if( opt.arc4 != DFL_ARC4 ) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1162 | mbedtls_ssl_conf_arc4_support( &conf, opt.arc4 ); |
Manuel Pégourié-Gonnard | 66dc555 | 2015-05-14 12:28:21 +0200 | [diff] [blame] | 1163 | #endif |
Paul Bakker | 5193688 | 2011-02-20 16:05:58 +0000 | [diff] [blame] | 1164 | |
Manuel Pégourié-Gonnard | 85d915b | 2014-11-03 20:10:36 +0100 | [diff] [blame] | 1165 | if( opt.allow_legacy != DFL_ALLOW_LEGACY ) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1166 | mbedtls_ssl_conf_legacy_renegotiation( &conf, opt.allow_legacy ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1167 | #if defined(MBEDTLS_SSL_RENEGOTIATION) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1168 | mbedtls_ssl_conf_renegotiation( &conf, opt.renegotiation ); |
Manuel Pégourié-Gonnard | 615e677 | 2014-11-03 08:23:14 +0100 | [diff] [blame] | 1169 | #endif |
Paul Bakker | 48916f9 | 2012-09-16 19:57:18 +0000 | [diff] [blame] | 1170 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1171 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
Manuel Pégourié-Gonnard | 3e1b178 | 2014-02-27 13:35:00 +0100 | [diff] [blame] | 1172 | if( strcmp( opt.ca_path, "none" ) != 0 && |
| 1173 | strcmp( opt.ca_file, "none" ) != 0 ) |
| 1174 | { |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1175 | mbedtls_ssl_conf_ca_chain( &conf, &cacert, NULL ); |
Manuel Pégourié-Gonnard | 3e1b178 | 2014-02-27 13:35:00 +0100 | [diff] [blame] | 1176 | } |
| 1177 | if( strcmp( opt.crt_file, "none" ) != 0 && |
| 1178 | strcmp( opt.key_file, "none" ) != 0 ) |
| 1179 | { |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1180 | if( ( ret = mbedtls_ssl_conf_own_cert( &conf, &clicert, &pkey ) ) != 0 ) |
Manuel Pégourié-Gonnard | c5fd391 | 2014-07-08 14:05:52 +0200 | [diff] [blame] | 1181 | { |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1182 | mbedtls_printf( " failed\n ! mbedtls_ssl_conf_own_cert returned %d\n\n", ret ); |
Manuel Pégourié-Gonnard | c5fd391 | 2014-07-08 14:05:52 +0200 | [diff] [blame] | 1183 | goto exit; |
| 1184 | } |
Manuel Pégourié-Gonnard | 3e1b178 | 2014-02-27 13:35:00 +0100 | [diff] [blame] | 1185 | } |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 1186 | #endif |
| 1187 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1188 | #if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1189 | if( ( ret = mbedtls_ssl_conf_psk( &conf, psk, psk_len, |
Manuel Pégourié-Gonnard | c5fd391 | 2014-07-08 14:05:52 +0200 | [diff] [blame] | 1190 | (const unsigned char *) opt.psk_identity, |
| 1191 | strlen( opt.psk_identity ) ) ) != 0 ) |
| 1192 | { |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1193 | mbedtls_printf( " failed\n ! mbedtls_ssl_conf_psk returned %d\n\n", ret ); |
Manuel Pégourié-Gonnard | c5fd391 | 2014-07-08 14:05:52 +0200 | [diff] [blame] | 1194 | goto exit; |
| 1195 | } |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 1196 | #endif |
| 1197 | |
Manuel Pégourié-Gonnard | 8c8be1e | 2015-03-31 14:21:11 +0200 | [diff] [blame] | 1198 | if( opt.min_version != DFL_MIN_VERSION ) |
Manuel Pégourié-Gonnard | 01e5e8c | 2015-05-11 10:11:56 +0200 | [diff] [blame] | 1199 | mbedtls_ssl_conf_min_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3, opt.min_version ); |
Manuel Pégourié-Gonnard | 864a81f | 2014-02-10 14:25:10 +0100 | [diff] [blame] | 1200 | |
Manuel Pégourié-Gonnard | 8c8be1e | 2015-03-31 14:21:11 +0200 | [diff] [blame] | 1201 | if( opt.max_version != DFL_MAX_VERSION ) |
Manuel Pégourié-Gonnard | 01e5e8c | 2015-05-11 10:11:56 +0200 | [diff] [blame] | 1202 | mbedtls_ssl_conf_max_version( &conf, MBEDTLS_SSL_MAJOR_VERSION_3, opt.max_version ); |
Paul Bakker | 1d29fb5 | 2012-09-28 13:28:45 +0000 | [diff] [blame] | 1203 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1204 | #if defined(MBEDTLS_SSL_FALLBACK_SCSV) |
Manuel Pégourié-Gonnard | 1cbd39d | 2014-10-20 13:34:59 +0200 | [diff] [blame] | 1205 | if( opt.fallback != DFL_FALLBACK ) |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1206 | mbedtls_ssl_conf_fallback( &conf, opt.fallback ); |
Manuel Pégourié-Gonnard | 1cbd39d | 2014-10-20 13:34:59 +0200 | [diff] [blame] | 1207 | #endif |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1208 | |
Manuel Pégourié-Gonnard | 06939ce | 2015-05-11 11:25:46 +0200 | [diff] [blame] | 1209 | if( ( ret = mbedtls_ssl_setup( &ssl, &conf ) ) != 0 ) |
| 1210 | { |
| 1211 | mbedtls_printf( " failed\n ! mbedtls_ssl_setup returned -0x%x\n\n", -ret ); |
| 1212 | goto exit; |
| 1213 | } |
| 1214 | |
| 1215 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
| 1216 | if( ( ret = mbedtls_ssl_set_hostname( &ssl, opt.server_name ) ) != 0 ) |
| 1217 | { |
| 1218 | mbedtls_printf( " failed\n ! mbedtls_ssl_set_hostname returned %d\n\n", ret ); |
| 1219 | goto exit; |
| 1220 | } |
| 1221 | #endif |
| 1222 | |
Manuel Pégourié-Gonnard | 70905a7 | 2015-09-16 11:08:34 +0200 | [diff] [blame] | 1223 | #if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED) |
| 1224 | if( opt.ecjpake_pw != DFL_ECJPAKE_PW ) |
| 1225 | { |
| 1226 | if( ( ret = mbedtls_ssl_set_hs_ecjpake_password( &ssl, |
| 1227 | (const unsigned char *) opt.ecjpake_pw, |
| 1228 | strlen( opt.ecjpake_pw ) ) ) != 0 ) |
| 1229 | { |
| 1230 | mbedtls_printf( " failed\n ! mbedtls_ssl_set_hs_ecjpake_password returned %d\n\n", ret ); |
| 1231 | goto exit; |
| 1232 | } |
| 1233 | } |
| 1234 | #endif |
| 1235 | |
Manuel Pégourié-Gonnard | 06939ce | 2015-05-11 11:25:46 +0200 | [diff] [blame] | 1236 | if( opt.nbio == 2 ) |
| 1237 | mbedtls_ssl_set_bio( &ssl, &server_fd, my_send, my_recv, NULL ); |
| 1238 | else |
| 1239 | mbedtls_ssl_set_bio( &ssl, &server_fd, mbedtls_net_send, mbedtls_net_recv, |
Manuel Pégourié-Gonnard | d4f04db | 2015-05-14 18:58:17 +0200 | [diff] [blame] | 1240 | opt.nbio == 0 ? mbedtls_net_recv_timeout : NULL ); |
Manuel Pégourié-Gonnard | 06939ce | 2015-05-11 11:25:46 +0200 | [diff] [blame] | 1241 | |
Manuel Pégourié-Gonnard | d2377e7 | 2015-05-13 13:58:56 +0200 | [diff] [blame] | 1242 | #if defined(MBEDTLS_TIMING_C) |
Manuel Pégourié-Gonnard | e3c41ad | 2015-05-13 10:04:32 +0200 | [diff] [blame] | 1243 | mbedtls_ssl_set_timer_cb( &ssl, &timer, mbedtls_timing_set_delay, |
| 1244 | mbedtls_timing_get_delay ); |
Manuel Pégourié-Gonnard | d2377e7 | 2015-05-13 13:58:56 +0200 | [diff] [blame] | 1245 | #endif |
Manuel Pégourié-Gonnard | e3c41ad | 2015-05-13 10:04:32 +0200 | [diff] [blame] | 1246 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1247 | mbedtls_printf( " ok\n" ); |
Manuel Pégourié-Gonnard | 798f15a | 2014-03-26 18:12:04 +0100 | [diff] [blame] | 1248 | |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1249 | /* |
| 1250 | * 4. Handshake |
| 1251 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1252 | mbedtls_printf( " . Performing the SSL/TLS handshake..." ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1253 | fflush( stdout ); |
| 1254 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1255 | while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 ) |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1256 | { |
Manuel Pégourié-Gonnard | 8836994 | 2015-05-06 16:19:31 +0100 | [diff] [blame] | 1257 | if( ret != MBEDTLS_ERR_SSL_WANT_READ && ret != MBEDTLS_ERR_SSL_WANT_WRITE ) |
Paul Bakker | 40e4694 | 2009-01-03 21:51:57 +0000 | [diff] [blame] | 1258 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1259 | mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n", -ret ); |
| 1260 | if( ret == MBEDTLS_ERR_X509_CERT_VERIFY_FAILED ) |
| 1261 | mbedtls_printf( |
Manuel Pégourié-Gonnard | fcf2fc2 | 2014-03-11 11:10:27 +0100 | [diff] [blame] | 1262 | " Unable to verify the server's certificate. " |
| 1263 | "Either it is invalid,\n" |
| 1264 | " or you didn't set ca_file or ca_path " |
| 1265 | "to an appropriate value.\n" |
| 1266 | " Alternatively, you may want to use " |
| 1267 | "auth_mode=optional for testing purposes.\n" ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1268 | mbedtls_printf( "\n" ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1269 | goto exit; |
Paul Bakker | 40e4694 | 2009-01-03 21:51:57 +0000 | [diff] [blame] | 1270 | } |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1271 | } |
| 1272 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1273 | mbedtls_printf( " ok\n [ Protocol is %s ]\n [ Ciphersuite is %s ]\n", |
| 1274 | mbedtls_ssl_get_version( &ssl ), mbedtls_ssl_get_ciphersuite( &ssl ) ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1275 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1276 | if( ( ret = mbedtls_ssl_get_record_expansion( &ssl ) ) >= 0 ) |
| 1277 | mbedtls_printf( " [ Record expansion is %d ]\n", ret ); |
Manuel Pégourié-Gonnard | 9b35f18 | 2014-10-14 17:47:31 +0200 | [diff] [blame] | 1278 | else |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1279 | mbedtls_printf( " [ Record expansion is unknown (compression) ]\n" ); |
Manuel Pégourié-Gonnard | 9b35f18 | 2014-10-14 17:47:31 +0200 | [diff] [blame] | 1280 | |
Manuel Pégourié-Gonnard | a2cda6b | 2015-08-31 18:30:52 +0200 | [diff] [blame] | 1281 | #if defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH) |
| 1282 | mbedtls_printf( " [ Maximum fragment length is %u ]\n", |
| 1283 | (unsigned int) mbedtls_ssl_get_max_frag_len( &ssl ) ); |
| 1284 | #endif |
| 1285 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1286 | #if defined(MBEDTLS_SSL_ALPN) |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 1287 | if( opt.alpn_string != NULL ) |
| 1288 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1289 | const char *alp = mbedtls_ssl_get_alpn_protocol( &ssl ); |
| 1290 | mbedtls_printf( " [ Application Layer Protocol is %s ]\n", |
Manuel Pégourié-Gonnard | 1bd2281 | 2014-04-05 14:34:07 +0200 | [diff] [blame] | 1291 | alp ? alp : "(none)" ); |
| 1292 | } |
| 1293 | #endif |
| 1294 | |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1295 | if( opt.reconnect != 0 ) |
| 1296 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1297 | mbedtls_printf(" . Saving session for reuse..." ); |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1298 | fflush( stdout ); |
| 1299 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1300 | if( ( ret = mbedtls_ssl_get_session( &ssl, &saved_session ) ) != 0 ) |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1301 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1302 | mbedtls_printf( " failed\n ! mbedtls_ssl_get_session returned -0x%x\n\n", -ret ); |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1303 | goto exit; |
| 1304 | } |
| 1305 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1306 | mbedtls_printf( " ok\n" ); |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1307 | } |
| 1308 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1309 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1310 | /* |
| 1311 | * 5. Verify the server certificate |
| 1312 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1313 | mbedtls_printf( " . Verifying peer X.509 certificate..." ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1314 | |
Manuel Pégourié-Gonnard | e6ef16f | 2015-05-11 19:54:43 +0200 | [diff] [blame] | 1315 | if( ( flags = mbedtls_ssl_get_verify_result( &ssl ) ) != 0 ) |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1316 | { |
Manuel Pégourié-Gonnard | 89addc4 | 2015-04-20 10:56:18 +0100 | [diff] [blame] | 1317 | char vrfy_buf[512]; |
| 1318 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1319 | mbedtls_printf( " failed\n" ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1320 | |
Manuel Pégourié-Gonnard | e6ef16f | 2015-05-11 19:54:43 +0200 | [diff] [blame] | 1321 | mbedtls_x509_crt_verify_info( vrfy_buf, sizeof( vrfy_buf ), " ! ", flags ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1322 | |
Manuel Pégourié-Gonnard | 89addc4 | 2015-04-20 10:56:18 +0100 | [diff] [blame] | 1323 | mbedtls_printf( "%s\n", vrfy_buf ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1324 | } |
| 1325 | else |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1326 | mbedtls_printf( " ok\n" ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1327 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1328 | if( mbedtls_ssl_get_peer_cert( &ssl ) != NULL ) |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 1329 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1330 | mbedtls_printf( " . Peer certificate information ...\n" ); |
| 1331 | mbedtls_x509_crt_info( (char *) buf, sizeof( buf ) - 1, " ", |
| 1332 | mbedtls_ssl_get_peer_cert( &ssl ) ); |
| 1333 | mbedtls_printf( "%s\n", buf ); |
Paul Bakker | d4a56ec | 2013-04-16 18:05:29 +0200 | [diff] [blame] | 1334 | } |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1335 | #endif /* MBEDTLS_X509_CRT_PARSE_C */ |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1336 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1337 | #if defined(MBEDTLS_SSL_RENEGOTIATION) |
Manuel Pégourié-Gonnard | 780d671 | 2014-02-20 17:19:59 +0100 | [diff] [blame] | 1338 | if( opt.renegotiate ) |
Manuel Pégourié-Gonnard | 53b3e06 | 2013-10-29 18:16:38 +0100 | [diff] [blame] | 1339 | { |
Manuel Pégourié-Gonnard | 780d671 | 2014-02-20 17:19:59 +0100 | [diff] [blame] | 1340 | /* |
| 1341 | * Perform renegotiation (this must be done when the server is waiting |
| 1342 | * for input from our side). |
| 1343 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1344 | mbedtls_printf( " . Performing renegotiation..." ); |
Manuel Pégourié-Gonnard | 780d671 | 2014-02-20 17:19:59 +0100 | [diff] [blame] | 1345 | fflush( stdout ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1346 | while( ( ret = mbedtls_ssl_renegotiate( &ssl ) ) != 0 ) |
Manuel Pégourié-Gonnard | 53b3e06 | 2013-10-29 18:16:38 +0100 | [diff] [blame] | 1347 | { |
Manuel Pégourié-Gonnard | 8836994 | 2015-05-06 16:19:31 +0100 | [diff] [blame] | 1348 | if( ret != MBEDTLS_ERR_SSL_WANT_READ && |
| 1349 | ret != MBEDTLS_ERR_SSL_WANT_WRITE ) |
Manuel Pégourié-Gonnard | 780d671 | 2014-02-20 17:19:59 +0100 | [diff] [blame] | 1350 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1351 | mbedtls_printf( " failed\n ! mbedtls_ssl_renegotiate returned %d\n\n", ret ); |
Manuel Pégourié-Gonnard | 780d671 | 2014-02-20 17:19:59 +0100 | [diff] [blame] | 1352 | goto exit; |
| 1353 | } |
Manuel Pégourié-Gonnard | 53b3e06 | 2013-10-29 18:16:38 +0100 | [diff] [blame] | 1354 | } |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1355 | mbedtls_printf( " ok\n" ); |
Manuel Pégourié-Gonnard | 53b3e06 | 2013-10-29 18:16:38 +0100 | [diff] [blame] | 1356 | } |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1357 | #endif /* MBEDTLS_SSL_RENEGOTIATION */ |
Manuel Pégourié-Gonnard | 53b3e06 | 2013-10-29 18:16:38 +0100 | [diff] [blame] | 1358 | |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1359 | /* |
| 1360 | * 6. Write the GET request |
| 1361 | */ |
Manuel Pégourié-Gonnard | e63582a | 2014-10-14 11:47:21 +0200 | [diff] [blame] | 1362 | retry_left = opt.max_resend; |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1363 | send_request: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1364 | mbedtls_printf( " > Write to server:" ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1365 | fflush( stdout ); |
| 1366 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1367 | len = mbedtls_snprintf( (char *) buf, sizeof(buf) - 1, GET_REQUEST, |
Manuel Pégourié-Gonnard | dcab293 | 2014-08-14 17:47:17 +0200 | [diff] [blame] | 1368 | opt.request_page ); |
Manuel Pégourié-Gonnard | 9de64f5 | 2015-07-01 15:51:43 +0200 | [diff] [blame] | 1369 | tail_len = (int) strlen( GET_REQUEST_END ); |
Manuel Pégourié-Gonnard | dcab293 | 2014-08-14 17:47:17 +0200 | [diff] [blame] | 1370 | |
| 1371 | /* Add padding to GET request to reach opt.request_size in length */ |
| 1372 | if( opt.request_size != DFL_REQUEST_SIZE && |
| 1373 | len + tail_len < opt.request_size ) |
Paul Bakker | 93c32b2 | 2014-04-25 13:40:05 +0200 | [diff] [blame] | 1374 | { |
Manuel Pégourié-Gonnard | dcab293 | 2014-08-14 17:47:17 +0200 | [diff] [blame] | 1375 | memset( buf + len, 'A', opt.request_size - len - tail_len ); |
| 1376 | len += opt.request_size - len - tail_len; |
Paul Bakker | 93c32b2 | 2014-04-25 13:40:05 +0200 | [diff] [blame] | 1377 | } |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1378 | |
Manuel Pégourié-Gonnard | dcab293 | 2014-08-14 17:47:17 +0200 | [diff] [blame] | 1379 | strncpy( (char *) buf + len, GET_REQUEST_END, sizeof(buf) - len - 1 ); |
| 1380 | len += tail_len; |
| 1381 | |
Manuel Pégourié-Gonnard | dea29c5 | 2014-06-18 13:07:56 +0200 | [diff] [blame] | 1382 | /* Truncate if request size is smaller than the "natural" size */ |
| 1383 | if( opt.request_size != DFL_REQUEST_SIZE && |
| 1384 | len > opt.request_size ) |
| 1385 | { |
| 1386 | len = opt.request_size; |
| 1387 | |
| 1388 | /* Still end with \r\n unless that's really not possible */ |
| 1389 | if( len >= 2 ) buf[len - 2] = '\r'; |
| 1390 | if( len >= 1 ) buf[len - 1] = '\n'; |
| 1391 | } |
| 1392 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1393 | if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ) |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1394 | { |
Manuel Pégourié-Gonnard | 2d87e41 | 2014-10-13 18:38:36 +0200 | [diff] [blame] | 1395 | for( written = 0, frags = 0; written < len; written += ret, frags++ ) |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1396 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1397 | while( ( ret = mbedtls_ssl_write( &ssl, buf + written, len - written ) ) |
Manuel Pégourié-Gonnard | 2d87e41 | 2014-10-13 18:38:36 +0200 | [diff] [blame] | 1398 | <= 0 ) |
Manuel Pégourié-Gonnard | 787b658 | 2013-07-16 15:43:17 +0200 | [diff] [blame] | 1399 | { |
Manuel Pégourié-Gonnard | 8836994 | 2015-05-06 16:19:31 +0100 | [diff] [blame] | 1400 | if( ret != MBEDTLS_ERR_SSL_WANT_READ && |
| 1401 | ret != MBEDTLS_ERR_SSL_WANT_WRITE ) |
Manuel Pégourié-Gonnard | 2d87e41 | 2014-10-13 18:38:36 +0200 | [diff] [blame] | 1402 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1403 | mbedtls_printf( " failed\n ! mbedtls_ssl_write returned -0x%x\n\n", -ret ); |
Manuel Pégourié-Gonnard | 2d87e41 | 2014-10-13 18:38:36 +0200 | [diff] [blame] | 1404 | goto exit; |
| 1405 | } |
Manuel Pégourié-Gonnard | 787b658 | 2013-07-16 15:43:17 +0200 | [diff] [blame] | 1406 | } |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1407 | } |
| 1408 | } |
Manuel Pégourié-Gonnard | 2d87e41 | 2014-10-13 18:38:36 +0200 | [diff] [blame] | 1409 | else /* Not stream, so datagram */ |
| 1410 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1411 | do ret = mbedtls_ssl_write( &ssl, buf, len ); |
Manuel Pégourié-Gonnard | 8836994 | 2015-05-06 16:19:31 +0100 | [diff] [blame] | 1412 | while( ret == MBEDTLS_ERR_SSL_WANT_READ || |
| 1413 | ret == MBEDTLS_ERR_SSL_WANT_WRITE ); |
Manuel Pégourié-Gonnard | 2d87e41 | 2014-10-13 18:38:36 +0200 | [diff] [blame] | 1414 | |
| 1415 | if( ret < 0 ) |
| 1416 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1417 | mbedtls_printf( " failed\n ! mbedtls_ssl_write returned %d\n\n", ret ); |
Manuel Pégourié-Gonnard | 2d87e41 | 2014-10-13 18:38:36 +0200 | [diff] [blame] | 1418 | goto exit; |
| 1419 | } |
| 1420 | |
| 1421 | frags = 1; |
| 1422 | written = ret; |
| 1423 | } |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1424 | |
Manuel Pégourié-Gonnard | 787b658 | 2013-07-16 15:43:17 +0200 | [diff] [blame] | 1425 | buf[written] = '\0'; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1426 | mbedtls_printf( " %d bytes written in %d fragments\n\n%s\n", written, frags, (char *) buf ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1427 | |
| 1428 | /* |
| 1429 | * 7. Read the HTTP response |
| 1430 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1431 | mbedtls_printf( " < Read from server:" ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1432 | fflush( stdout ); |
| 1433 | |
Manuel Pégourié-Gonnard | ae5050c | 2014-07-11 14:14:15 +0200 | [diff] [blame] | 1434 | /* |
| 1435 | * TLS and DTLS need different reading styles (stream vs datagram) |
| 1436 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1437 | if( opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ) |
Manuel Pégourié-Gonnard | ae5050c | 2014-07-11 14:14:15 +0200 | [diff] [blame] | 1438 | { |
| 1439 | do |
| 1440 | { |
| 1441 | len = sizeof( buf ) - 1; |
| 1442 | memset( buf, 0, sizeof( buf ) ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1443 | ret = mbedtls_ssl_read( &ssl, buf, len ); |
Manuel Pégourié-Gonnard | ae5050c | 2014-07-11 14:14:15 +0200 | [diff] [blame] | 1444 | |
Manuel Pégourié-Gonnard | 8836994 | 2015-05-06 16:19:31 +0100 | [diff] [blame] | 1445 | if( ret == MBEDTLS_ERR_SSL_WANT_READ || |
| 1446 | ret == MBEDTLS_ERR_SSL_WANT_WRITE ) |
Manuel Pégourié-Gonnard | ae5050c | 2014-07-11 14:14:15 +0200 | [diff] [blame] | 1447 | continue; |
| 1448 | |
| 1449 | if( ret <= 0 ) |
| 1450 | { |
| 1451 | switch( ret ) |
| 1452 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1453 | case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY: |
| 1454 | mbedtls_printf( " connection was closed gracefully\n" ); |
Manuel Pégourié-Gonnard | ae5050c | 2014-07-11 14:14:15 +0200 | [diff] [blame] | 1455 | ret = 0; |
| 1456 | goto close_notify; |
| 1457 | |
| 1458 | case 0: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1459 | case MBEDTLS_ERR_NET_CONN_RESET: |
| 1460 | mbedtls_printf( " connection was reset by peer\n" ); |
Manuel Pégourié-Gonnard | ae5050c | 2014-07-11 14:14:15 +0200 | [diff] [blame] | 1461 | ret = 0; |
| 1462 | goto reconnect; |
| 1463 | |
| 1464 | default: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1465 | mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n", -ret ); |
Manuel Pégourié-Gonnard | ae5050c | 2014-07-11 14:14:15 +0200 | [diff] [blame] | 1466 | goto exit; |
| 1467 | } |
| 1468 | } |
| 1469 | |
| 1470 | len = ret; |
| 1471 | buf[len] = '\0'; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1472 | mbedtls_printf( " %d bytes read\n\n%s", len, (char *) buf ); |
Manuel Pégourié-Gonnard | ae5050c | 2014-07-11 14:14:15 +0200 | [diff] [blame] | 1473 | |
| 1474 | /* End of message should be detected according to the syntax of the |
| 1475 | * application protocol (eg HTTP), just use a dummy test here. */ |
| 1476 | if( ret > 0 && buf[len-1] == '\n' ) |
| 1477 | { |
| 1478 | ret = 0; |
| 1479 | break; |
| 1480 | } |
| 1481 | } |
| 1482 | while( 1 ); |
| 1483 | } |
| 1484 | else /* Not stream, so datagram */ |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1485 | { |
| 1486 | len = sizeof( buf ) - 1; |
| 1487 | memset( buf, 0, sizeof( buf ) ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1488 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1489 | do ret = mbedtls_ssl_read( &ssl, buf, len ); |
Manuel Pégourié-Gonnard | 8836994 | 2015-05-06 16:19:31 +0100 | [diff] [blame] | 1490 | while( ret == MBEDTLS_ERR_SSL_WANT_READ || |
| 1491 | ret == MBEDTLS_ERR_SSL_WANT_WRITE ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1492 | |
Manuel Pégourié-Gonnard | e08660e | 2014-08-16 11:28:40 +0200 | [diff] [blame] | 1493 | if( ret <= 0 ) |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1494 | { |
Manuel Pégourié-Gonnard | e08660e | 2014-08-16 11:28:40 +0200 | [diff] [blame] | 1495 | switch( ret ) |
| 1496 | { |
Manuel Pégourié-Gonnard | 8836994 | 2015-05-06 16:19:31 +0100 | [diff] [blame] | 1497 | case MBEDTLS_ERR_SSL_TIMEOUT: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1498 | mbedtls_printf( " timeout\n" ); |
Manuel Pégourié-Gonnard | e63582a | 2014-10-14 11:47:21 +0200 | [diff] [blame] | 1499 | if( retry_left-- > 0 ) |
Manuel Pégourié-Gonnard | f1e0df3 | 2014-10-02 14:02:32 +0200 | [diff] [blame] | 1500 | goto send_request; |
| 1501 | goto exit; |
| 1502 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1503 | case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY: |
| 1504 | mbedtls_printf( " connection was closed gracefully\n" ); |
Manuel Pégourié-Gonnard | e08660e | 2014-08-16 11:28:40 +0200 | [diff] [blame] | 1505 | ret = 0; |
Manuel Pégourié-Gonnard | f138874 | 2014-08-19 16:14:36 +0200 | [diff] [blame] | 1506 | goto close_notify; |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1507 | |
Manuel Pégourié-Gonnard | e08660e | 2014-08-16 11:28:40 +0200 | [diff] [blame] | 1508 | default: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1509 | mbedtls_printf( " mbedtls_ssl_read returned -0x%x\n", -ret ); |
Manuel Pégourié-Gonnard | e08660e | 2014-08-16 11:28:40 +0200 | [diff] [blame] | 1510 | goto exit; |
| 1511 | } |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 1512 | } |
| 1513 | |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1514 | len = ret; |
Paul Bakker | 93c32b2 | 2014-04-25 13:40:05 +0200 | [diff] [blame] | 1515 | buf[len] = '\0'; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1516 | mbedtls_printf( " %d bytes read\n\n%s", len, (char *) buf ); |
Manuel Pégourié-Gonnard | ae5050c | 2014-07-11 14:14:15 +0200 | [diff] [blame] | 1517 | ret = 0; |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1518 | } |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1519 | |
Manuel Pégourié-Gonnard | e08660e | 2014-08-16 11:28:40 +0200 | [diff] [blame] | 1520 | /* |
Manuel Pégourié-Gonnard | dbd2307 | 2015-09-04 10:20:17 +0200 | [diff] [blame] | 1521 | * 7b. Simulate hard reset and reconnect from same port? |
| 1522 | */ |
| 1523 | if( opt.reconnect_hard != 0 ) |
| 1524 | { |
| 1525 | opt.reconnect_hard = 0; |
| 1526 | |
| 1527 | mbedtls_printf( " . Restarting connection from same port..." ); |
| 1528 | fflush( stdout ); |
| 1529 | |
| 1530 | if( ( ret = mbedtls_ssl_session_reset( &ssl ) ) != 0 ) |
| 1531 | { |
| 1532 | mbedtls_printf( " failed\n ! mbedtls_ssl_session_reset returned -0x%x\n\n", -ret ); |
| 1533 | goto exit; |
| 1534 | } |
| 1535 | |
| 1536 | while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 ) |
| 1537 | { |
| 1538 | if( ret != MBEDTLS_ERR_SSL_WANT_READ && |
| 1539 | ret != MBEDTLS_ERR_SSL_WANT_WRITE ) |
| 1540 | { |
| 1541 | mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n", -ret ); |
| 1542 | goto exit; |
| 1543 | } |
| 1544 | } |
| 1545 | |
| 1546 | mbedtls_printf( " ok\n" ); |
| 1547 | |
| 1548 | goto send_request; |
| 1549 | } |
| 1550 | |
| 1551 | /* |
| 1552 | * 7c. Continue doing data exchanges? |
Manuel Pégourié-Gonnard | a8c0a0d | 2014-08-15 12:07:38 +0200 | [diff] [blame] | 1553 | */ |
| 1554 | if( --opt.exchanges > 0 ) |
| 1555 | goto send_request; |
| 1556 | |
| 1557 | /* |
Manuel Pégourié-Gonnard | f138874 | 2014-08-19 16:14:36 +0200 | [diff] [blame] | 1558 | * 8. Done, cleanly close the connection |
| 1559 | */ |
| 1560 | close_notify: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1561 | mbedtls_printf( " . Closing the connection..." ); |
Manuel Pégourié-Gonnard | dbd2307 | 2015-09-04 10:20:17 +0200 | [diff] [blame] | 1562 | fflush( stdout ); |
Manuel Pégourié-Gonnard | f138874 | 2014-08-19 16:14:36 +0200 | [diff] [blame] | 1563 | |
Manuel Pégourié-Gonnard | 994f8b5 | 2014-10-09 19:56:44 +0200 | [diff] [blame] | 1564 | /* No error checking, the connection might be closed already */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1565 | do ret = mbedtls_ssl_close_notify( &ssl ); |
Manuel Pégourié-Gonnard | 8836994 | 2015-05-06 16:19:31 +0100 | [diff] [blame] | 1566 | while( ret == MBEDTLS_ERR_SSL_WANT_WRITE ); |
Manuel Pégourié-Gonnard | 994f8b5 | 2014-10-09 19:56:44 +0200 | [diff] [blame] | 1567 | ret = 0; |
Manuel Pégourié-Gonnard | f138874 | 2014-08-19 16:14:36 +0200 | [diff] [blame] | 1568 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1569 | mbedtls_printf( " done\n" ); |
Manuel Pégourié-Gonnard | f138874 | 2014-08-19 16:14:36 +0200 | [diff] [blame] | 1570 | |
| 1571 | /* |
| 1572 | * 9. Reconnect? |
Manuel Pégourié-Gonnard | e08660e | 2014-08-16 11:28:40 +0200 | [diff] [blame] | 1573 | */ |
| 1574 | reconnect: |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1575 | if( opt.reconnect != 0 ) |
| 1576 | { |
Manuel Pégourié-Gonnard | cf2e97e | 2013-08-02 15:04:36 +0200 | [diff] [blame] | 1577 | --opt.reconnect; |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1578 | |
Manuel Pégourié-Gonnard | 3d7d00a | 2015-06-30 15:55:03 +0200 | [diff] [blame] | 1579 | mbedtls_net_free( &server_fd ); |
Manuel Pégourié-Gonnard | 6b0d268 | 2014-03-25 11:24:43 +0100 | [diff] [blame] | 1580 | |
Manuel Pégourié-Gonnard | d2377e7 | 2015-05-13 13:58:56 +0200 | [diff] [blame] | 1581 | #if defined(MBEDTLS_TIMING_C) |
Manuel Pégourié-Gonnard | c55a5b7 | 2014-02-20 22:50:56 +0100 | [diff] [blame] | 1582 | if( opt.reco_delay > 0 ) |
Manuel Pégourié-Gonnard | a63bc94 | 2015-05-14 18:22:47 +0200 | [diff] [blame] | 1583 | mbedtls_net_usleep( 1000000 * opt.reco_delay ); |
Manuel Pégourié-Gonnard | d2377e7 | 2015-05-13 13:58:56 +0200 | [diff] [blame] | 1584 | #endif |
Manuel Pégourié-Gonnard | 38d1eba | 2013-08-23 10:44:29 +0200 | [diff] [blame] | 1585 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1586 | mbedtls_printf( " . Reconnecting with saved session..." ); |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1587 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1588 | if( ( ret = mbedtls_ssl_session_reset( &ssl ) ) != 0 ) |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1589 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1590 | mbedtls_printf( " failed\n ! mbedtls_ssl_session_reset returned -0x%x\n\n", -ret ); |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1591 | goto exit; |
| 1592 | } |
| 1593 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1594 | if( ( ret = mbedtls_ssl_set_session( &ssl, &saved_session ) ) != 0 ) |
Manuel Pégourié-Gonnard | c5fd391 | 2014-07-08 14:05:52 +0200 | [diff] [blame] | 1595 | { |
Manuel Pégourié-Gonnard | 6729e79 | 2015-05-11 09:50:24 +0200 | [diff] [blame] | 1596 | mbedtls_printf( " failed\n ! mbedtls_ssl_conf_session returned %d\n\n", ret ); |
Manuel Pégourié-Gonnard | c5fd391 | 2014-07-08 14:05:52 +0200 | [diff] [blame] | 1597 | goto exit; |
| 1598 | } |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1599 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1600 | if( ( ret = mbedtls_net_connect( &server_fd, opt.server_addr, opt.server_port, |
| 1601 | opt.transport == MBEDTLS_SSL_TRANSPORT_STREAM ? |
| 1602 | MBEDTLS_NET_PROTO_TCP : MBEDTLS_NET_PROTO_UDP ) ) != 0 ) |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1603 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1604 | mbedtls_printf( " failed\n ! mbedtls_net_connect returned -0x%x\n\n", -ret ); |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1605 | goto exit; |
| 1606 | } |
| 1607 | |
Manuel Pégourié-Gonnard | 85beb30 | 2014-10-02 17:59:19 +0200 | [diff] [blame] | 1608 | if( opt.nbio > 0 ) |
Manuel Pégourié-Gonnard | 5db6432 | 2015-06-30 15:40:39 +0200 | [diff] [blame] | 1609 | ret = mbedtls_net_set_nonblock( &server_fd ); |
Manuel Pégourié-Gonnard | 85beb30 | 2014-10-02 17:59:19 +0200 | [diff] [blame] | 1610 | else |
Manuel Pégourié-Gonnard | 5db6432 | 2015-06-30 15:40:39 +0200 | [diff] [blame] | 1611 | ret = mbedtls_net_set_block( &server_fd ); |
Manuel Pégourié-Gonnard | 85beb30 | 2014-10-02 17:59:19 +0200 | [diff] [blame] | 1612 | if( ret != 0 ) |
| 1613 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1614 | mbedtls_printf( " failed\n ! net_set_(non)block() returned -0x%x\n\n", |
Manuel Pégourié-Gonnard | 85beb30 | 2014-10-02 17:59:19 +0200 | [diff] [blame] | 1615 | -ret ); |
| 1616 | goto exit; |
| 1617 | } |
| 1618 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1619 | while( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 ) |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1620 | { |
Manuel Pégourié-Gonnard | 8836994 | 2015-05-06 16:19:31 +0100 | [diff] [blame] | 1621 | if( ret != MBEDTLS_ERR_SSL_WANT_READ && |
| 1622 | ret != MBEDTLS_ERR_SSL_WANT_WRITE ) |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1623 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1624 | mbedtls_printf( " failed\n ! mbedtls_ssl_handshake returned -0x%x\n\n", -ret ); |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1625 | goto exit; |
| 1626 | } |
| 1627 | } |
| 1628 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1629 | mbedtls_printf( " ok\n" ); |
Manuel Pégourié-Gonnard | aaa1eab | 2013-07-30 13:43:43 +0200 | [diff] [blame] | 1630 | |
| 1631 | goto send_request; |
| 1632 | } |
| 1633 | |
Manuel Pégourié-Gonnard | e08660e | 2014-08-16 11:28:40 +0200 | [diff] [blame] | 1634 | /* |
| 1635 | * Cleanup and exit |
| 1636 | */ |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1637 | exit: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1638 | #ifdef MBEDTLS_ERROR_C |
Paul Bakker | a3d195c | 2011-11-27 21:07:34 +0000 | [diff] [blame] | 1639 | if( ret != 0 ) |
| 1640 | { |
| 1641 | char error_buf[100]; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1642 | mbedtls_strerror( ret, error_buf, 100 ); |
| 1643 | mbedtls_printf("Last error was: -0x%X - %s\n\n", -ret, error_buf ); |
Paul Bakker | a3d195c | 2011-11-27 21:07:34 +0000 | [diff] [blame] | 1644 | } |
| 1645 | #endif |
| 1646 | |
Manuel Pégourié-Gonnard | 3d7d00a | 2015-06-30 15:55:03 +0200 | [diff] [blame] | 1647 | mbedtls_net_free( &server_fd ); |
Manuel Pégourié-Gonnard | e08660e | 2014-08-16 11:28:40 +0200 | [diff] [blame] | 1648 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1649 | #if defined(MBEDTLS_X509_CRT_PARSE_C) |
| 1650 | mbedtls_x509_crt_free( &clicert ); |
| 1651 | mbedtls_x509_crt_free( &cacert ); |
| 1652 | mbedtls_pk_free( &pkey ); |
Paul Bakker | ed27a04 | 2013-04-18 22:46:23 +0200 | [diff] [blame] | 1653 | #endif |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1654 | mbedtls_ssl_session_free( &saved_session ); |
| 1655 | mbedtls_ssl_free( &ssl ); |
Manuel Pégourié-Gonnard | def0bbe | 2015-05-04 14:56:36 +0200 | [diff] [blame] | 1656 | mbedtls_ssl_config_free( &conf ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1657 | mbedtls_ctr_drbg_free( &ctr_drbg ); |
| 1658 | mbedtls_entropy_free( &entropy ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1659 | |
Paul Bakker | cce9d77 | 2011-11-18 14:26:47 +0000 | [diff] [blame] | 1660 | #if defined(_WIN32) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1661 | mbedtls_printf( " + Press Enter to exit this program.\n" ); |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1662 | fflush( stdout ); getchar(); |
| 1663 | #endif |
| 1664 | |
Paul Bakker | dbd79ca | 2013-07-24 16:28:35 +0200 | [diff] [blame] | 1665 | // Shell can not handle large exit numbers -> 1 for errors |
| 1666 | if( ret < 0 ) |
| 1667 | ret = 1; |
| 1668 | |
Paul Bakker | 5121ce5 | 2009-01-03 21:22:43 +0000 | [diff] [blame] | 1669 | return( ret ); |
| 1670 | } |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1671 | #endif /* MBEDTLS_BIGNUM_C && MBEDTLS_ENTROPY_C && MBEDTLS_SSL_TLS_C && |
| 1672 | MBEDTLS_SSL_CLI_C && MBEDTLS_NET_C && MBEDTLS_RSA_C && |
Manuel Pégourié-Gonnard | d2377e7 | 2015-05-13 13:58:56 +0200 | [diff] [blame] | 1673 | MBEDTLS_CTR_DRBG_C MBEDTLS_TIMING_C */ |